Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · include/addons
5259ff70512a55a6…
126.2 KB
PHP · include/addons
cecc61acf022aaae…
109.3 KB
CSS · assets/css
1e3b0b1b0ec44339…
72.4 KB
GIF · assets/admin/images
241e293c538eeb13…
60.3 KB
JSON · include/admin/json
4efbd6f3f86d34b7…
42.6 KB
JS · assets/js
5bd085ae9683aaf5…
41.0 KB
POT · languages
3ca4d9eb675bb6ee…
26.5 KB
PHP · include/licence
7f25b8e416802b89…
24.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.