Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · css
1d8358bb66b4544e…
69.6 KB
CSS · css
2c532f9067d8cf27…
69.5 KB
CSS · jquery-ui/redmond
339ecf7b6cb5511a…
26.8 KB
PHP · package root
2d2eae91abb47e3c…
18.1 KB
PHP · posttypes
f90c76ac393eb2cd…
12.2 KB
PHP · package root
c989dbc2baf13ef0…
11.9 KB
PO · package root
1e8dc01c28fe46ef…
9.4 KB
PHP · package root
6a4e9f092f3176b5…
8.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
14 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.