Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js/dist
f5bebca0389e7d74…
56.0 KB
PHP · package root
6894b8ca7dea63ce…
48.1 KB
PHP · includes/api
b1c8a8005667110e…
23.8 KB
POT · languages
a5031a430a4b8990…
8.6 KB
PHP · includes
40b6dd34649ac25a…
6.2 KB
JS · assets/js/dist
ee2d476bd36d2654…
3.2 KB
PHP · package root
0210a68f582589f7…
2.2 KB
TXT · package root
8294deeb95cea784…
1.3 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.