Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · assets/libs/tippy
1bcea1611e9c9ecf…
111.7 KB
MAP · assets/libs/tippy
4b4fb67abd5aff68…
107.5 KB
CONFIG · includes/vendor/mossadal/math-parser
627eeccf812ae08a…
98.2 KB
JSON · assets/data
c6b9711630611ed2…
92.7 KB
JS · assets/libs/wpcdpk/js
aaae01107bfa7eeb…
86.3 KB
PHP · includes
11988eb2bdd5e78f…
53.4 KB
PHP · includes/wpc-premium
c5468d62d0d0fb6f…
43.0 KB
JS · assets/js
372318242c814f4e…
38.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.