Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · includes/gateways/authorize/AuthnetXML/ssl
9298e78534db2ea7…
252.4 KB
PO · languages
16bfc9b49127e7ec…
124.3 KB
POT · languages
8fe0cfd56d52fc7b…
106.0 KB
PHP · package root
3676d39741d84e2c…
61.5 KB
PHP · includes
7682e9472069f5dd…
59.6 KB
PO · languages
b11be937797bd80b…
53.8 KB
TXT · package root
5dcf0ea914fefbf5…
47.9 KB
TXT · package root
2f170924736ef83e…
46.0 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.