Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
bac679ce72af1f8b…
20.3 KB
PHP · package root
16b2c9a742d701c4…
16.3 KB
PHP · package root
1d25596ad7316a7f…
15.8 KB
PHP · package root
efdf3e73b4cc30a0…
7.5 KB
FILE · objects/08
55cbd458be63d878…
6.8 KB
SAMPLE · hooks
4febce8677900523…
4.8 KB
SAMPLE · hooks
e0549964e93897b5…
4.6 KB
FILE · objects/3e
1727168481fb2f62…
4.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.