Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · library
2036b42962c6208d…
1.63 MB
JS · Gutenberg/dist
75e76e499a0d85fd…
98.7 KB
PHP · includes/Filters
7dc3f66f77374f84…
27.9 KB
PHP · includes/Providers
d1ba5ad68fe3acfe…
23.1 KB
PHP · includes/Filters
92a4b188fe6ca028…
20.2 KB
PHP · includes/Dependencies/WPDeveloper/Licensing
72ef623e73bf6a16…
19.6 KB
PHP · includes/Analytics
38af7717420ad933…
19.2 KB
PHP · includes/Classes
9edd929afeabbdf1…
17.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.