Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
466276c6794f722d…
28.8 KB
PNG · assets/images
f1e553211840d2d4…
27.0 KB
PHP · updater
0f0d72e1516b8933…
15.8 KB
PHP · license
7de5ff30fcfc2e6f…
15.1 KB
PHP · license
1f55d7488f4ec3b2…
12.5 KB
PHP · fields-support
254628f417e24a6d…
11.6 KB
PHP · package root
9662f032bb31038a…
7.4 KB
PHP · submit
5c0e18921c42d90f…
4.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.