Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · classes
4edd943e5566b444…
38.3 KB
TXT · lib/paypal-digital-goods
ebe1401fccf9d495…
32.5 KB
PHP · classes
a58ebe3a62c84210…
16.4 KB
PHP · lib/paypal-digital-goods
fa5e7a2ab5252706…
14.5 KB
PHP · lib/paypal-digital-goods
0c9489ac54329029…
14.1 KB
PHP · lib/paypal-digital-goods
2793d62a4d2b98a0…
13.5 KB
PHP · package root
ac7eeb7d0a6d3c4c…
13.2 KB
PHP · lib/paypal-digital-goods
48f355fc1858b93c…
9.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.