Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PACK · .git/objects/pack
…
9.56 MB
IDX · .git/objects/pack
6460d5b85f70f811…
406.6 KB
MAP · includes/sportspress/assets/js
600a10dc5cd110de…
220.3 KB
POT · includes/sportspress/languages
d4bf14fff55c7c5c…
191.1 KB
JS · includes/sportspress/assets/js
85d455b4522415f6…
144.1 KB
PHP · includes/sportspress/includes/libraries
50b60054985f3317…
134.9 KB
FILE · .git
38a4454f92afd289…
109.6 KB
TXT · package root
e7c56af8047eec63…
85.8 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.