Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · backend/data
d0d703d0cf7e5388…
833.4 KB
PHP · includes/item-elements
e07471be2ad6bde2…
374.3 KB
PO · langs
a9a0bb9e2561d7e0…
158.7 KB
JS · frontend/assets/js
42c1648aa9cd3e9c…
151.1 KB
JS · backend/assets/js
45045f6926f73127…
131.7 KB
PHP · includes
3147af444ab28169…
118.9 KB
PHP · backend/views
8ce643c73c5c051e…
115.6 KB
PHP · backend/views
fcb86c8422d3a395…
113.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
gzinflate
Decompresses a string in memory
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.