Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · audio11_html5_radio_history/js
d78464e26324c3b3…
27.0 KB
JPG · audio11_html5_radio_history
91db15f45a8d565f…
24.6 KB
PHP · widgets
dfb669ef45cefdd4…
17.6 KB
CSS · audio11_html5_radio_history
b875397e3ad3af99…
12.5 KB
PHP · audio11_html5_radio_history
a8fb36df0f6e82a7…
7.4 KB
PHP · package root
9e163780f28d5ec8…
5.6 KB
PHP · audio11_html5_radio_history
834c407a308770ef…
4.0 KB
PHP · package root
6fe79235e50a3e84…
2.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request3
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.