Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · 3rdpart/vanilla-select
8b958ae55d0e390b…
57.0 KB
PHP · package root
94d45cdbe6879619…
47.5 KB
PHP · includes
ddce2fb436787e53…
30.0 KB
JS · 3rdpart/vanilla-select
cefd41ee2cda7bcb…
29.1 KB
PO · languages
2fc312300d700da2…
18.4 KB
PHP · includes
2c236de66216f41f…
18.4 KB
MD · 3rdpart/vanilla-select
4413c468df8df7bd…
15.4 KB
MO · languages
36f745d6f24164e4…
13.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.