Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · inc
863c88d82bf72544…
126.8 KB
PO · languages
532293929d7e8908…
112.2 KB
PO · languages
b5fb516175030833…
111.2 KB
PO · languages
cd29fbc6ba151c39…
95.5 KB
PO · languages
25f997ebdeb7135a…
91.7 KB
MO · languages
f67d9ade581ebb0e…
86.2 KB
MO · languages
9d7cb6f02d32b3ae…
85.2 KB
PO · languages
7202d0a2223d397c…
85.1 KB
Code signals
7 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command13
gzinflate
Decompresses a string in memory
Obfuscation12
exec / system
Runs an operating-system command
System command5
unserialize
Unsafe when given untrusted input
Deserialization5
curl_exec
Makes an outbound HTTP request
Remote request3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
eval
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.