Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · package root
db1cfa1c83cabc77…
1021.4 KB
SVG · libs/webfonts
86c7d89d0f0d29d8…
822.9 KB
SVG · libs/webfonts
ed5bfbea42378c58…
684.1 KB
EOT · libs/webfonts
5ef4c7be9577dde0…
188.2 KB
TTF · libs/webfonts
20656d1a8f2ea44e…
188.0 KB
SVG · libs/webfonts
953c82ccf56ee1a2…
141.1 KB
EOT · libs/webfonts
60fb2d28d2f1dbd2…
127.8 KB
TTF · libs/webfonts
ca785b3a0d0f4c1b…
127.5 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.