Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · package root
5b911a733a596c5f…
34.6 KB
PHP · package root
1645a3fe5205bad6…
27.2 KB
PHP · package root
8ebafabe985f3759…
17.5 KB
PHP · updater
33a3a9354857bc3b…
15.5 KB
TXT · package root
4c82c82f2c7cccfb…
4.5 KB
GITIGNORE · package root
431b4f518fc78baa…
0.2 KB
PHP · updater
9a8b5cff0a3b3d19…
0.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.