Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · css
56df0e8aa80ce35c…
37.0 KB
JS · js
8f375fa10d981942…
35.9 KB
PHP · package root
fe21eb7e421be1c6…
12.6 KB
PHP · elementor/widgets
9d7e6f034d7baf19…
4.9 KB
POT · package root
1d84ecc74b0f0a57…
4.8 KB
SVG · images
4db7bed4f53bcd79…
3.6 KB
PHP · package root
28fc949864fe01a6…
2.1 KB
PHP · elementor
4975370c2e85e618…
1.1 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.