Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · wpf-third-party
55accff7b642c2d7…
247.7 KB
PHP · wpf-third-party/file-uploader
0f072bcae32cffa2…
57.9 KB
PHP · package root
e63a7286129eb062…
56.1 KB
JS · wpf-third-party/file-uploader/js
4639ccecdd991c5d…
54.8 KB
JS · assets/js
99202948a49c3810…
36.7 KB
JS · wpf-third-party/file-uploader/js
4bd20b4bb595465d…
30.8 KB
PHP · includes
cdc69d1e9923e64c…
19.3 KB
JS · assets/js
c5020cbfe957f991…
18.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command3
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.