Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
92c18ca74f3b22a6…
78.5 KB
PHP · package root
5e0ecb73f807b877…
26.3 KB
PHP · package root
c21d1839a8066ee6…
21.8 KB
PHP · updater
095a020675def8ec…
15.8 KB
PHP · license
53a4934d74fd7fb4…
15.2 KB
PHP · license
6cdae79698bf85d9…
12.5 KB
TXT · package root
977366adb8ec8087…
8.5 KB
PHP · package root
7eba47e5fec59fe2…
8.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.