Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
6f38f7739c0c967b…
86.8 KB
PNG · package root
add35bcafc6763b9…
47.0 KB
PHP · frontend
fd856a7e3688a345…
10.5 KB
PHP · admin
2e011abbe2694c87…
7.0 KB
JS · vendor/svg
57b0d5a66d6a16ed…
7.0 KB
PO · package root
5c52a4fb2acfaaa2…
6.9 KB
POT · package root
1041251246f51089…
6.9 KB
PHP · package root
de7b48012d641974…
4.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.