Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/composer
42b8c5525dbc1330…
16.1 KB
PHP · vendor/composer
21f4ba19e7859cb3…
15.8 KB
PHP · src
7f46b95be10db94c…
12.6 KB
PHP · lib/NfBridge/Actions
0d190cbcdbfd06d9…
12.4 KB
PHP · lib/Hubspot
9af6873f8ba9c32d…
11.3 KB
PHP · src/Actions
fadef53e93b51207…
9.7 KB
PHP · lib/NfBridge/Actions
0eabac3c3cac6caa…
9.0 KB
PHP · lib/Shared/Abstracts
f2348ab48721b207…
8.6 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.