Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · fonts/awesome
1782156bfa2054db…
296.4 KB
WOFF2 · fonts/awesome
1b099f88c06ed086…
123.9 KB
PO · languages
873d927de98ba4ca…
70.5 KB
MO · languages
85ece6e473a1e1f1…
52.4 KB
POT · languages
9998e1c9e4582151…
48.1 KB
PHP · inc
73229610e2254dfd…
47.0 KB
PNG · img
3d6d22c1c6738bfc…
35.0 KB
PHP · inc
c307a75bfbc78f8e…
34.5 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command4
eval
Executes a string as code
Code execution2
exec / system
Runs an operating-system command
System command2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
19 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.