Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
GIF · assets/img
fbe7803084c019ed…
80.2 KB
PO · languages
7793bf23ebbc7ff4…
70.6 KB
PO · languages
0e2b332bc35106e1…
69.5 KB
PO · languages
c475e72dfbe9d038…
67.4 KB
POT · languages
f6bf9c89902a88e4…
56.1 KB
PNG · assets/img
fed3b2d061cb11e3…
52.9 KB
PHP · includes/l10n
19382dd8ae959248…
37.2 KB
FILE · package root
3972dc9744f6499f…
34.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.