Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/composer
4175a7792e15c409…
423.2 KB
PHP · vendor/composer
a463f1eeed80bc97…
390.6 KB
PHP · vendor_prefixed/apimatic/jsonmapper/src
6f183f25ed6d65ef…
66.4 KB
JSON · vendor/composer
02d001551ce2d97e…
51.8 KB
PHP · vendor_prefixed/square/square/src/Models
f39e9875ae96ef71…
41.4 KB
CSS · assets/css/integrations/divi
fe55776955a55a36…
41.1 KB
PHP · vendor_prefixed/square/square/src/Models
c7dfe4d476309b9a…
40.6 KB
PHP · vendor_prefixed/square/square/src/Models
77ffb144c129fa15…
38.4 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command4
curl_exec
Makes an outbound HTTP request
Remote request1
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.