Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · lib/captcha/fonts
791f4763e4e8a370…
51.3 KB
PHP · backend/modules/custom_fields/templates
95d20c0987a1c000…
32.6 KB
JS · backend/modules/custom_fields/resources/js
e4c011c689441f61…
26.5 KB
PHP · lib/proxy_providers
7b957519b27d3f56…
14.7 KB
PHP · frontend/modules/booking/templates
c0beff7abfe786f6…
10.9 KB
PNG · lib/captcha/backgrounds
f6f0c152a3929c5d…
10.9 KB
PHP · lib/base
658a490923f65ab6…
7.0 KB
PHP · frontend/modules/booking/proxy_providers
3a0d2a27411a01a6…
7.0 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.