Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · includes/gateways/authorize/AuthnetXML/ssl
9298e78534db2ea7…
252.4 KB
PO · languages
16bfc9b49127e7ec…
124.3 KB
POT · languages
589e4f5e37aa3128…
105.5 KB
PHP · package root
4acf06a11a48d74b…
61.5 KB
PHP · includes
65e3dfea17b598e1…
58.6 KB
PO · languages
b11be937797bd80b…
53.8 KB
TXT · package root
c981d87cc317f75f…
47.6 KB
TXT · package root
d4e19a504d268c15…
45.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.