Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · admin/js/DataTables
59b87695d5917b04…
242.8 KB
JS · admin/js/DataTables
acc7e41455a80765…
95.3 KB
PHP · admin
1f348dd215717c4b…
85.0 KB
JS · public/js/noty
0b3150461a971a45…
79.0 KB
JS · public/js
6cf9c4225b596406…
63.8 KB
POT · languages
667caf48ca2c3d94…
61.8 KB
MP3 · public/js/noty/sounds
f75d73690f828e62…
45.3 KB
PHP · public
940f785dbabb94fb…
41.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.