Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
e6f2cfb9f82d23e2…
54.2 KB
PHP · includes
2e2cbc8a8c660594…
44.3 KB
PHP · admin
f55f4d1a2ab86640…
28.7 KB
PHP · includes
8c2030363297f777…
21.4 KB
PO · languages
11c806b4eeb4e72b…
17.5 KB
PHP · includes
12bd07b8181070bd…
16.5 KB
PHP · admin
d6e833b48725a4f7…
15.2 KB
PHP · includes
2921ab6f0b254d39…
11.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.