Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
135cea5088e316d1…
48.7 KB
PHP · update-checker/vendor
ee52d7d0bafc76b4…
36.7 KB
PHP · res
1b0793a892430035…
33.5 KB
PHP · update-checker/Puc/v5p2
d0b0e11e337092ff…
30.8 KB
PHP · res
ce972f1b0b9cb07a…
30.5 KB
PHP · res/other
f1a9d736ea3be94f…
23.3 KB
MD · update-checker
35889eb44291bcc9…
20.3 KB
POT · languages
4dab7815d236b73c…
16.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.