Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · vendors
4acf6bfe7872a7ce…
50.2 KB
JS · vendors/slick
0c7178cc6ca34fb1…
41.9 KB
PHP · plugin-update-checker/vendor
ee52d7d0bafc76b4…
36.7 KB
PHP · plugin-update-checker/vendor
b6538399a732ea15…
36.4 KB
FILE · package root
8ceb4b9ee5adedde…
34.3 KB
PHP · plugin-update-checker/Puc/v4p11
f0a27ae6266e6997…
30.8 KB
JSON · vendors/sliderkits-icons
6b1498072defc8e3…
29.5 KB
POT · package root
a13f9c07ea6f9c06…
27.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.