Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · options
a611781c13de5748…
26.9 KB
PHP · includes
a44c619133468d77…
19.2 KB
PHP · includes
6f9bdaebdec8f55d…
12.1 KB
PHP · options
ce77aca49e392183…
11.9 KB
PHP · package root
21c188b23b8dabd3…
5.3 KB
POT · languages
3607cf3ce70c891d…
3.9 KB
PNG · assets/img/wp-icons
39da756286a20730…
3.7 KB
JS · assets/js
3268d2cf89744b0e…
3.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.