Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
LOCK · vendor/beycanpress/currency-converter
3f25fc3144069c84…
41.4 KB
TXT · package root
589ed823e9a84c56…
34.3 KB
PHP · vendor/composer
d4b2313e562edf94…
16.0 KB
PHP · vendor/composer
21f4ba19e7859cb3…
15.8 KB
PHP · app
75e27bd1fb097e33…
14.3 KB
PHP · vendor/beycanpress/currency-converter/src
c9a5f49e376c365f…
8.8 KB
PHP · app
9470f9d89cb391a1…
8.4 KB
PHP · app
0b1cc92b9bf04cd3…
4.7 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
curl_exec
Makes an outbound HTTP request
Remote request2
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.