Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · lib/base
1b3f880d77cef55d…
7.0 KB
PHP · lib/payment
5b6615cc57e7db72…
5.9 KB
PHP · lib
61a90b0989d4a509…
3.9 KB
PHP · lib/payment/paypal
fbe111b73b3e0503…
1.9 KB
PHP · lib/payment/paypal
85bdb4117bab3385…
1.8 KB
PHP · lib/payment/paypal
2cf8f4327ed931b2…
1.6 KB
PHP · lib/payment/paypal
0091093e6784b7f1…
1.3 KB
PHP · lib
b14c643cb6196088…
1.1 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.