Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendors/wp-background-processing
29693f06efd0cabb…
23.6 KB
PHP · classes/libraries
58024a502fc43adb…
14.1 KB
PHP · classes/utils
04ea57fc62ea29b3…
7.7 KB
PHP · classes/entities
020ef5045ba9db42…
6.9 KB
PHP · classes/admin/groups
93119a83821b9507…
6.7 KB
POT · languages
b8db91061358c790…
6.6 KB
PHP · classes/repositories
0ded519f6e4f578a…
6.0 KB
PHP · classes/services
90c68e56c9b0fa9a…
5.7 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.