Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images/about
72800166bc07a6f7…
877.1 KB
POT · languages
40206ed33b6972a8…
808.0 KB
PO · languages
251959c9c0d709ef…
475.9 KB
JS · assets/vue/wizard/dist/js
3b9abde07c9a0981…
462.3 KB
PO · languages
f58ea5fa0a016c05…
440.4 KB
SVG · assets/fonts/font-awesome/fonts
ad6157926c1622ba…
434.0 KB
PO · languages
c5a9e992bcab9331…
419.9 KB
PNG · assets/images/analytics
8de8872bd824643d…
384.3 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization6
new Function()
Builds a function from a string
Code execution4
atob
Decodes base64 in the browser
Obfuscation2
curl_exec
Makes an outbound HTTP request
Remote request2
exec / system
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.