Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · res
7a2e8a99b5f272c9…
151.5 KB
PHP · package root
e77a3ed16b519db5…
97.2 KB
POT · languages
8a0de30fddef44e0…
64.5 KB
PHP · update-checker/vendor
8eb141fa55be71aa…
36.7 KB
PHP · update-checker/Puc/v5p6
7d031a02ca4f5bd9…
35.5 KB
JS · scripts
b42384907a08f806…
24.8 KB
PHP · res
0d717d6a6047507e…
23.4 KB
PHP · res/other
90b09f616a2f68a4…
23.1 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.