Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
8f3ab478381a0c9c…
46.8 KB
PHP · controllers
de98358e11db1d33…
11.3 KB
PHP · controllers
24c607745361d193…
9.6 KB
PHP · views/settings
bbc5137c5c5e8ba1…
4.5 KB
PHP · models
9bf475b30be9e377…
4.3 KB
PHP · highrise
d0980f02e5c96bad…
4.1 KB
PHP · views/action-settings
53ba23771bee6dd7…
4.0 KB
PHP · views/settings
c9f5051e714ae883…
3.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request3
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.