Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · assets/css
2732cbb58e06d87b…
84.4 KB
PHP · inc/vender
4d23d214bbcb8471…
81.4 KB
CSS · assets/css
9011453e91754b55…
70.5 KB
PHP · inc/vender
d3fcca27ce5d1c6d…
57.9 KB
SCSS · assets/scss
70056e71930621c0…
51.5 KB
CSS · assets/css
82690ceb0dff6763…
41.0 KB
CSS · assets/css
14de616d5c26d041…
36.2 KB
CSS · assets/css
9fbb285b7b54c5d1…
35.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation5
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.