Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · admin/ta-framework/fields/typography
5dff4548749762af…
120.4 KB
JS · admin/ta-framework/assets/js
35539d825faad965…
84.9 KB
CSS · admin/ta-framework/assets/css
eaa712cd177de407…
82.2 KB
JS · public/js
92ea0ceff674d256…
68.4 KB
JS · admin/ta-framework/assets/js
afaf42dde7b2e6b9…
46.3 KB
PHP · admin/ta-framework/fields/icon
2b5f24a729ab14f7…
31.0 KB
PHP · admin/ta-framework/classes
14cd70e7dd59faba…
26.0 KB
POT · languages
2a7609cec24c452b…
24.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.