Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · build
f47fa4dd41fc041e…
106.2 KB
PHP · vendor/composer
d4b2313e562edf94…
16.0 KB
PHP · vendor/composer
21f4ba19e7859cb3…
15.8 KB
PHP · package root
2e237b1f4dcb33c2…
13.8 KB
PHP · vendor/activecampaign/api-php/includes
a6f780cb639fbe12…
9.5 KB
PHP · vendor/activecampaign/api-php/includes
664eae4ee176aa64…
8.1 KB
POT · languages
c2415b9b0eeaa4ea…
6.8 KB
PHP · includes
001013e3c11ae401…
5.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.