Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · package root
5d1e53fc567a46cb…
159.2 KB
PO · lang
caf8bc4571dbbb7f…
136.8 KB
PO · lang
1369b1c1ff6119f0…
108.9 KB
MO · lang
3f6c791814311912…
76.5 KB
POT · lang
af7956fd28656e27…
71.3 KB
PHP · includes/classes
5037a97ce6d532b6…
65.3 KB
MO · lang
18ea348cee58946e…
62.0 KB
JS · js
66b110812950aba1…
56.3 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
exec / system
Runs an operating-system command
System command1
shell_exec
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.