Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
71a5d80b4eb47365…
44.0 KB
PHP · package root
70a650dae1bf8205…
42.9 KB
PHP · package root
4fc94eea70459594…
41.1 KB
PO · package root
c00d6a8cd6da8427…
20.5 KB
PO~ · package root
bbe63b71895495fc…
20.5 KB
POT · package root
971e589e1653207d…
20.5 KB
POT~ · package root
2bec535f9dbff206…
20.5 KB
PHP · package root
16b2c9a742d701c4…
16.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.