Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
DAT · res
b451f14c52a288ee…
403.5 KB
PHP · package root
c926993c717c50f3…
249.0 KB
PHP · res
b777dc8d43dfaff6…
151.6 KB
PHP · res
2050a9af43bfd2fc…
117.8 KB
POT · languages
1290b468c336ba90…
66.4 KB
PHP · res
2c3c42616c71b706…
64.2 KB
PHP · update-checker/vendor
ee52d7d0bafc76b4…
36.7 KB
JS · scripts
9bc0c2625179747f…
31.6 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request16
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
unserialize
Unsafe when given untrusted input
Deserialization3
exec / system
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.