Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
131.01 MB
ZIP · pos_zonan_theme_1.0.3/pos_zonan1_theme
…
11.09 MB
ZIP · pos_zonan_theme_1.0.3/pos_zonan2_theme
…
11.04 MB
ZIP · pos_zonan_theme_1.0.3/pos_zonan3_theme
…
11.03 MB
JPG · documentation/pos_zonan/assets/images
4504179cf5e8da08…
1.73 MB
SQL · database
3a73312d5b5d4455…
1.54 MB
JPG · documentation/pos_zonan/assets/images
ccc409d22b24638b…
483.8 KB
JPG · documentation/pos_zonan/assets/images
40dbfcea5d2fc521…
444.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
file_get_contents(url)
Fetches a remote URL
Remote request2
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.