Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
7f2b7a9c7bdf29c5…
69.9 KB
PHP · package root
e1aafe75b708aca9…
53.1 KB
PNG · skins/blackControllers
911b4bcaaef1319c…
28.6 KB
PNG · skins/whiteControllers
911b4bcaaef1319c…
28.6 KB
CSS · package root
bb96682773b3eb40…
27.1 KB
JS · js
c3302ad5312d2f21…
20.0 KB
PNG · skins
a14452e71af710cc…
7.0 KB
PHP · package root
2c846f92f478d456…
5.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.