Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
f1521386fa16a075…
152.9 KB
SVG · assets/img/blocks/product_search
9cf3acfbd2f8cc7c…
52.5 KB
PHP · addons/partial_payment
2a9865ccc2a06b78…
52.4 KB
SVG · assets/img/blocks/product_search
4b9dc764bcfa4836…
39.1 KB
POT · languages
867fef2f19207021…
37.8 KB
PHP · includes/free-features
982c8128415c95b6…
36.8 KB
PHP · blocks/filter
c060e4a2fa8a3a59…
32.0 KB
SVG · assets/img/blocks/product_search
2a4ca7ed66fea4bf…
30.3 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
15 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.