Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
b24f78750a44dbdb…
81.5 KB
PHP · includes/Illuminate
a2cbd88e5937859b…
46.4 KB
LOCK · license
1264cfe538bf756a…
40.1 KB
PHP · templates/admin
a15619fedbd1e643…
31.9 KB
PHP · templates/admin
44b3e80622e20bfc…
27.6 KB
PHP · includes/Frontend
af7a9d93f731caa5…
23.7 KB
PHP · includes/Illuminate/Gateways/Mollie
cc26113852a03537…
22.8 KB
PHP · includes/Admin/Product
e52cfafc815c9f75…
22.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.