Darkyn – Creative Agency WordPress Theme · Sep 08, 2026, 07:48 AM UTC
Cleanzip312 entriescrc-verifiedphppngcss
ZIP
3.57 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Darkyn
Version
1.0
Version check
Mismatch
package contains 1.0, product page advertises 1
Author
ThemeGuri
Author URI
http://themeforest.net/user/themeguri
Project URI
https://demoxml.com/wp/darkyn
Description
Introducing Darkyn, Modern looking and fully mobile responsive WordPress Theme for car rental business. Darkyn is a powerpack WordPress Theme tailored for the car rental services. It has all the inner pages that are required to build a strong website. Darkyn is a best combination of modern design a…
Requires PHP
7.0
Tested up to
5.0
License
This theme or plugin is comprised of two parts. (1) the PHP code and integrated HTML are licensed under the General Public License (GPL). You will find a copy of the GPL in the same directory as this text file. (2) All other parts, but not limited to the CSS code, images, and design are licensed ac…
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · thirdparty/plugins
…
2.81 MB
JS · js
b275b616b254d2f5…
897.0 KB
XML · content
3362535618a08898…
365.8 KB
JPG · images
72b106cd0f5ea754…
222.9 KB
SVG · assets/images
a29b633a0ea0ed31…
147.6 KB
PHP · library
97e134bae613b3f9…
127.0 KB
CSS · css
47704485fde81311…
86.3 KB
PHP · package root
aa29fa1fd803981e…
79.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.