Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CRT · includes/libraries/stripe/data
9265af106c80ad5f…
222.2 KB
PHP · includes
8467cd4ae103c191…
54.9 KB
MD · includes/libraries/stripe
9d557e6868deb328…
43.4 KB
JS · assets/js/frontend
72427ddbf8bb7026…
36.7 KB
PHP · includes
a7d6ce067cf2ec64…
21.7 KB
PHP · includes/libraries/stripe/lib
808e68074e9041f4…
19.2 KB
PHP · includes/libraries/stripe/lib
e39803b49a74dfef…
18.3 KB
PHP · includes/libraries/stripe/lib/HttpClient
a6ab040c16454ef9…
17.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command2
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.