Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
3.15 MB
PNG · images
73aadc44b9519c93…
1.54 MB
ZIP · package root
3864c52a1f1b269a…
993.4 KB
PNG · package root
c0c7e56056186164…
990.8 KB
PNG · images
8d95ede87202a053…
604.0 KB
PNG · images
3455f3cf4381b58d…
490.9 KB
ZIP · inc/plugins
a351e5e276d6924e…
453.1 KB
PHP · ipanel/classes
6d78b40638388e1a…
414.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.