Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · app/Modules/Emoji
…
2.73 MB
JS · assets
b07046f7546cfe6e…
175.8 KB
PHP · app/Modules/CloudStorage/S3
d325fd666b8a9261…
76.4 KB
PO · language
65c8dfdc00ba5ac7…
72.4 KB
PO · language
2a32a4324d344058…
66.2 KB
POT · language
b0f3749f93480c92…
60.0 KB
TXT · package root
da54ac39fa738d46…
35.9 KB
PHP · app/Http/Controllers
60ec7ff7019d9c69…
34.6 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
new Function()
Builds a function from a string
Code execution2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.