Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · admin
ba2dc2316d80b8c6…
38.4 KB
PHP · admin
bd3ce306ec4d747d…
15.0 KB
JS · public/js
043c21782a47d148…
13.5 KB
POT · languages
a139ef610e8b4a53…
12.4 KB
PHP · includes
46bb1a180539a9eb…
8.9 KB
PHP · public
7b99902bf2c2dcb1…
8.3 KB
PHP · admin
16021aff1ef71e0f…
6.8 KB
JS · admin/js
6d34265f2b926ee3…
5.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.