Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · update-checker/vendor
8eb141fa55be71aa…
36.7 KB
PHP · update-checker/Puc/v5p6
7d031a02ca4f5bd9…
35.5 KB
PHP · res/other
5d06273474390728…
23.1 KB
MD · update-checker
47124242bb42eea8…
20.3 KB
PHP · update-checker/Puc/v5p6/Vcs
9bc6a56467c5d7e7…
13.4 KB
PHP · update-checker/Puc/v5p6/Plugin
9942138a2073bea9…
13.0 KB
POT · languages
f34be2b1c4eb823e…
12.7 KB
PHP · vendor/composer
67760389dec19f20…
12.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.