Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/screens
06a8e710dae7fac9…
353.1 KB
PNG · assets/screens
db523419e567fde6…
267.1 KB
PNG · assets/screens
0af89afcf1556e71…
165.2 KB
PHP · package root
97de419b170fb92e…
65.6 KB
PNG · assets/screens
4035e414e50951be…
54.0 KB
PHP · includes
2c236de66216f41f…
18.4 KB
PNG · assets/icons
4a258fba4d4badd0…
17.5 KB
PNG · assets/icons
2d579822653d878e…
15.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.