Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · options/google-typography/ttf
…
2.03 MB
XML · options/demo-importer/demo-files/default
2fa5a1a2356df7ec…
1.17 MB
XML · options/demo-importer/demo-files/food
0ea7730e2a931bdb…
660.0 KB
XML · options/demo-importer/demo-files/bloggingtips
b14fa77edaaa5158…
625.3 KB
XML · options/demo-importer/demo-files/dating
14533ceb96dc4395…
599.9 KB
SVG · fonts
ad6157926c1622ba…
434.0 KB
PEM · functions
238823cd92d3bcdd…
208.9 KB
PHP · functions
9b14e407360082c7…
188.5 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
file_get_contents(url)
Fetches a remote URL
Remote request1
create_function
Removed in PHP 8; builds a function from a string
Code execution1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.