Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
7526f7c10f28c13d…
363.1 KB
PNG · img
062da7ab819a0cee…
67.0 KB
PHP · vendor
ee52d7d0bafc76b4…
36.7 KB
PHP · vendor
b6538399a732ea15…
36.4 KB
PHP · Puc/v4p4
d19553152298a5b1…
27.9 KB
PHP · Puc/v4p4/Plugin
d88bc157597beb70…
24.3 KB
MD · package root
3a2dc3af6ac71d42…
14.6 KB
TXT · package root
21b9245c8674f673…
14.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.