Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · controllers
82cff4c9a65c05ed…
19.4 KB
PHP · controllers
a1976eed2bf7a0c7…
9.2 KB
PO · languages
8eda0da985455f36…
3.5 KB
PO · languages
6f6b5917db237f36…
3.5 KB
PO · languages
64971449c18ce0f3…
3.4 KB
PO · languages
b65bcc835c83d64d…
3.4 KB
PO · languages
e3a96550550899cd…
3.4 KB
PO · languages
4c73e57b5d42e68e…
3.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.