Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · res/bootstrap/css
63ddd32e123c339a…
270.4 KB
JS · res/app/vendor
b6d2b9d57e47683e…
163.7 KB
JS · res/app/vendor
b9d6f9ce638107e0…
147.4 KB
CSS · res/_bootstrap/css
d5e6ae07d193cf54…
119.8 KB
CSS · res/bootstrap/css
d41e47f810782b9d…
91.5 KB
JS · res/app/vendor/angular-ui-bootstrap
f5782c828944def7…
84.0 KB
JS · res/_bootstrap/js
41af969ee00e8132…
66.0 KB
PHP · application/components
0b51f02ccb16bc1f…
49.6 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
curl_exec
Makes an outbound HTTP request
Remote request2
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.