Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · api/lib/ssl
79ea479e9f329de7…
210.5 KB
PHP · package root
980a085a42600b04…
65.6 KB
PHP · api/lib/net/authorize/api/contract/v1
596155aa1f5bba7c…
22.9 KB
PHP · api/lib
f581454baeb10e19…
17.6 KB
PHP · api/lib/net/authorize/api/contract/v1
44a0d118e136f5fc…
17.5 KB
PHP · api/lib
c5914ea18096e7e9…
17.1 KB
PHP · api/lib/net/authorize/api/contract/v1
d1d0c2ae62ef2c50…
14.4 KB
YML · api/lib/net/authorize/api/yml/v1
61921b9e1ed6b02c…
14.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.