Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · package root
c53a65c2fd561c87…
34.3 KB
PHP · includes
cd19ccee7a96d053…
30.4 KB
CSS · assets/css
c5ed5379b0c92117…
29.5 KB
PHP · includes
fd9e7e1f16e6b644…
28.9 KB
PHP · includes
fe926225aa020211…
24.1 KB
CSS · assets/css
ac25e9ba23d4a4b9…
17.4 KB
PHP · includes
395386396d7381a2…
15.7 KB
CSS · assets/css
751efe6f42f4be73…
14.1 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization5
gzinflate
Decompresses a string in memory
Obfuscation1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.