Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · libraries/Aws/src/data
e28ac4a939638285…
521.2 KB
PHP · libraries/Aws/src/data/s3/2006-03-01
f0f1aa9b0f8ecf11…
204.0 KB
JSON · vendor/composer
a121061e28f6fdba…
135.4 KB
PHP · libraries/Aws/src/data/s3/2006-03-01
489a7540fb2f52f0…
81.3 KB
PHP · libraries/Aws/src
ded4a0e163d30b57…
74.0 KB
PHP · libraries/Aws/src/data/kms/2014-11-01
33c08e4ec79c61d3…
68.6 KB
PHP · libraries/Aws/src/data
4c25976a69aced3f…
59.5 KB
PHP · libraries/GuzzleHttp/Psr7
c95cb9d4adc6160a…
53.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation11
assert
Can execute a string as code on old PHP
Code execution3
curl_exec
Makes an outbound HTTP request
Remote request1
shell_exec
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.