Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · library/helper
cb29463663b9087c…
41.0 KB
PHP · library
f0bc294adc4d886f…
27.0 KB
PHP · library
566971462d670398…
24.2 KB
PHP · library
494c52f1d0be7613…
17.4 KB
PHP · library
f1ea4b09b029cf73…
8.2 KB
PHP · library
1d7706ccdc3e8084…
8.2 KB
PNG · package root
7bac096eb6cb8988…
7.9 KB
PHP · library/helper
450d763965b5162c…
7.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.