Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · styles
43073d3e2f7ea2e7…
300.4 KB
CSS · styles
0d5e03a966f1b93c…
299.9 KB
JS · scripts
97a2b9ba92da8f5b…
291.7 KB
PHP · divi-4/modules/NextImageEffect
a0c0d369ed4fdf8e…
108.4 KB
POT · languages
595726a7ce55137a…
102.2 KB
PHP · divi-4/modules/NextImageIcon
8c46a3cf4fa8cef2…
76.6 KB
JS · scripts
4ce557538e091312…
71.2 KB
PHP · divi-4/modules/NextImageHoverBox
3737ce3428dcf671…
47.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.