Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
b94cf01290fd158d…
31.3 KB
PHP · package root
ec74a186da15eed4…
26.2 KB
PHP · includes
4fbf866f726e27ad…
25.0 KB
PHP · includes
aaec24af0256da40…
22.2 KB
CSS · assets/css
5240c2c57468f0dc…
21.3 KB
PHP · includes
2c236de66216f41f…
18.4 KB
PO · languages
e81ea9e07f55d42c…
14.5 KB
PHP · includes
b471ad10b76efb97…
12.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.