Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · js/built
…
4.83 MB
MAP · js/built
…
2.04 MB
MAP · js/built
2d7d0535ff0dd3ea…
1.06 MB
MAP · js/built
d21c51347feaf9c4…
1.04 MB
MAP · js/built
499bf4c546fb1ecc…
591.2 KB
JS · js/built
5a4955657a739714…
442.7 KB
JS · js/built
870ae748d39c791d…
352.3 KB
MAP · js/built
1c8c987bd1b15143…
316.2 KB
Code signals
7 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization7
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
new Function()
Builds a function from a string
Code execution3
assert
Can execute a string as code on old PHP
Code execution1
eval
Executes a string as code
Code execution1
file_get_contents(url)
Fetches a remote URL
Remote request1
exec / system
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.