Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · libraries/phpqrcode
291332fcc8d67e1b…
118.9 KB
PHP · libraries/phpqrcode/bindings/tcpdf
74a281421414fccb…
81.0 KB
POT · languages
70719caa7ced7a06…
43.4 KB
PHP · includes/admin
8f9f2830881364f6…
27.6 KB
PHP · libraries/phpqrcode
5261ae32e6ca5aeb…
26.0 KB
PHP · includes/custom-tables
a4a9973950fd369c…
25.7 KB
PHP · libraries/phpqrcode
7756f1ec86a9ad30…
24.2 KB
PHP · includes/custom-tables
051c586d16dd975b…
22.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
gzinflate
Decompresses a string in memory
Obfuscation4
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.