Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · includes/Shared/assets/js/pages
bad463522375df97…
101.8 KB
MAP · includes/Shared/assets/js/pages
2351f66a7eee45a4…
87.9 KB
MAP · includes/Shared/assets/js/pages
9f18c7158cb418a0…
72.7 KB
MAP · includes/Shared/assets/js/pages
aa2446d65e05d469…
64.4 KB
JS · includes/Shared/assets/js/pages
18658ee185c8747c…
61.0 KB
JS · includes/Shared/assets/js/pages
a2eccc2a2d541adf…
59.0 KB
JS · includes/Shared/assets/js/pages
abd5f9c5bbd66e73…
56.2 KB
MAP · includes/Shared/assets/js/pages
d5fd52d097f1605e…
45.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.