Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · modules/wp-sheet-editor/assets/vendor/js
…
2.63 MB
PHP · vendor/freemius/includes
c097c3acce21dfe8…
995.4 KB
JS · modules/wp-sheet-editor/assets/vendor/js
45aa4876abbd92eb…
951.3 KB
SVG · modules/wp-sheet-editor/assets/vendor/fonts
48dbe5e890055a28…
438.0 KB
PO · modules/wp-sheet-editor/lang
e17ece3180b919a5…
314.9 KB
PO · modules/wp-sheet-editor/lang
97b852d3395c05ad…
314.9 KB
PO · modules/wp-sheet-editor/lang
fa870d0128cfadc0…
314.9 KB
PO · modules/wp-sheet-editor/lang
56d4d110c1cf6f0c…
314.9 KB
Code signals
7 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization3
new Function()
Builds a function from a string
Code execution3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
gzinflate
Decompresses a string in memory
Obfuscation2
exec / system
Runs an operating-system command
System command2
shell_exec
Runs an operating-system command
System command2
atob
Decodes base64 in the browser
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.