Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · menus/google/src/Google/Service
06e1febccf258291…
341.7 KB
PHP · menus/google/src/Google/Service
d2657a551e548695…
316.3 KB
PHP · menus/google/src/Google/Service
45bae95902b18478…
265.4 KB
CRT · menus/facebook/src
6c80f83981855099…
250.9 KB
PEM · package root
a5e645dc1ee96b21…
249.8 KB
PHP · menus/google/src/Google/Service
b64c54d66d0cfb8d…
196.5 KB
PHP · menus/google/src/Google/Service
9ff20dfdf69735fb…
187.7 KB
PHP · menus/google/src/Google/Service
338082eed3f4af21…
172.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request9
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation5
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.