Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
fd6a6a6c8e1c60b0…
22.4 KB
PHP · includes
2c236de66216f41f…
18.4 KB
PHP · includes
dc7e3e9210eb826b…
12.0 KB
FILE · package root
4fac8571228c68f7…
10.4 KB
CSS · assets/css
832b8b4941f52c77…
3.5 KB
CSS · assets/css
107fb1dcc30cf26f…
3.5 KB
POT · languages
f3b9b4d57367d1af…
2.6 KB
PHP · includes
98ac0a20a1376c37…
1.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.