Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · assets/libs/tippy
1bcea1611e9c9ecf…
111.7 KB
MAP · assets/libs/tippy
4b4fb67abd5aff68…
107.5 KB
CONFIG · includes/vendor/mossadal/math-parser
627eeccf812ae08a…
98.2 KB
JS · assets/libs/wpcdpk/js
aaae01107bfa7eeb…
86.3 KB
PHP · includes
fa91a96261310c3a…
51.0 KB
PHP · includes/wpc-premium
c5468d62d0d0fb6f…
43.0 KB
JS · assets/js
cafd29da0b53b304…
36.1 KB
CSS · includes/wpc-core/assets/css
ba99793a43d9af99…
35.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.