Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
c37fa3de9c9bc2be…
61.3 KB
PHP · includes/aweber/aweber/aweber_api
018c1344954d4e41…
23.4 KB
PHP · includes/composer
8deadedec66a61eb…
12.3 KB
PHP · includes
334e5ab5502fd7e5…
11.2 KB
PHP · includes/aweber/aweber/aweber_api
4255b25ca89aa590…
10.9 KB
PHP · includes/aweber/aweber/aweber_api
500d0842da3cebae…
9.0 KB
PHP · includes/aweber/aweber/aweber_api
f8eb38919bc61e9f…
8.4 KB
MD · includes/aweber/aweber
f4194d6efa83bc2c…
6.1 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.