Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
ed5d450001076031…
140.9 KB
POT · languages
7dba4bb915a41d83…
131.2 KB
PHP · includes
131a69b494764046…
103.1 KB
PHP · includes
48197017ce52e9f1…
86.4 KB
PHP · includes
567671d897fe4853…
73.4 KB
PHP · includes
76f2f303962ae1ec…
72.6 KB
PHP · includes
88e9a55e35945dbc…
69.0 KB
PHP · includes
86233c7f9a85d9a2…
68.2 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
shell_exec
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.