Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · cmb2/includes
2e3c9eceeb751124…
52.8 KB
CSS · cmb2/css
b07930ef3ef9f051…
49.5 KB
CSS · cmb2/css
17eea5d9d975c155…
49.5 KB
PHP · cmb2/includes
ff8e2386c43329ff…
45.8 KB
CSS · cmb2/css
4f56dfea5aeed41b…
42.9 KB
CSS · cmb2/css
7d86ef2340322f1f…
42.9 KB
JS · js
abab32d84ce5dbd3…
42.5 KB
JS · cmb2/js
56f50dc86c2a4df1…
40.2 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.