VendBase (Formerly WooBase) · Sep 07, 2026, 08:08 AM UTC
Cleanzip376 entriescrc-verifiedsvgjavascriptphp
ZIP
2.95 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
VendBase (Formerly WooBase)
Version
2.0.0
Version check
Match
package and product page both state 2.0.0
Author
vendbase
Project URI
https://www.vendbase.io
Description
Faster, Smarter, Secure WooCommerce Management. Seamlessly integrate and manage your WooCommerce store, orders, and subscriptions through a modern, fast and streamlined interface.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · app/dist/assets
207c3cd37ee5c8a5…
1.59 MB
JS · app/dist/assets
0fcf79520a5f7572…
1.06 MB
JS · app/dist
89262dfcdee7f77a…
764.4 KB
JS · app/dist/assets
2caa658f88ffa70a…
378.9 KB
CSS · app/dist/assets/styles
67154147b4100d76…
282.4 KB
PO · languages
f3a9d0a5ca71154e…
189.7 KB
PO · languages
24a04edc86e12c57…
173.1 KB
JS · app/dist/assets
2081c4376d869ae1…
171.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.