Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
c2c4fd194c9c513b…
26.6 KB
PHP · package root
16b2c9a742d701c4…
16.3 KB
PHP · package root
9e90c5b948aba4de…
15.9 KB
PHP · package root
efd46c4bba68f82a…
7.9 KB
PHP · package root
e2e25bdf0269db95…
4.1 KB
POT · package root
682159096f6ba394…
4.0 KB
PO · package root
a1475eb9771ba9b7…
4.0 KB
PHP · package root
9981f95b25c91db1…
3.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization8
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.