Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · acf/assets/build/js
58410569741cb82d…
518.4 KB
MAP · acf/assets/build/css
fa7e80a9ce05b495…
433.2 KB
JS · acf/assets/build/js
8160dc2be0fd91e9…
274.5 KB
PO · acf/lang
b3b498d218fef6c8…
226.4 KB
MAP · acf/assets/build/js/pro
36d29b2ada38ffcd…
224.8 KB
CSS · acf/assets/build/css
6a40c761fa9a5b71…
224.5 KB
PO · acf/lang
2d201e123a5add46…
220.7 KB
PNG · acf/assets/images
8fed0fe50670fc7c…
215.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.