Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
e91d9e14623e19b3…
114.6 KB
PHP · includes/Modules
dbc22d43075025bf…
89.6 KB
PHP · includes/Modules
332efb5d66f6b997…
72.3 KB
PHP · includes/Modules
7ee5f4529e42c4e5…
64.0 KB
PHP · includes/Modules
3ae54d2ea40e1bad…
57.1 KB
PHP · includes/Modules
f4f2f24831fcccfc…
46.6 KB
PHP · includes/Modules
fd8cd914c35cbdf8…
43.4 KB
JS · dist/admin
830b649abb68f138…
37.3 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command8
unserialize
Unsafe when given untrusted input
Deserialization4
exec / system
Runs an operating-system command
System command3
atob
Decodes base64 in the browser
Obfuscation1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.