Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · languages
7444c6ffeb16dc70…
1.00 MB
PO · languages
e0cd190246c7ab93…
1002.5 KB
PO · languages
8daebb7b34d8988d…
874.2 KB
PO · languages
f8e6d86a5e5a7032…
867.9 KB
PO · languages
d4f73cd369e34a87…
865.2 KB
PO · languages
02be1958df864fc1…
865.1 KB
PO · languages
616768442633d652…
861.3 KB
PO · languages
db93f9e7d09ac2f0…
857.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation7
unserialize
Unsafe when given untrusted input
Deserialization6
new Function()
Builds a function from a string
Code execution5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.