Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · assets/css
87b5bc23616302a2…
112.8 KB
JS · assets/scripts
970a6cccd3c27677…
78.6 KB
JS · assets/scripts
cc14c7560a99a555…
63.4 KB
PHP · includes/modules/ConversionExport
3928cc0a1f30a34a…
43.9 KB
POT · languages
35f3895ec5c1c311…
37.4 KB
SVG · assets/images
2c11ea29a1e81242…
30.4 KB
PHP · includes
06d2ba8fbcd66c39…
28.9 KB
PHP · includes/modules/Form
fcef30dbc9600643…
28.0 KB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
file_get_contents(url)
Fetches a remote URL
Remote request1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
gzinflate
Decompresses a string in memory
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
exec / system
Runs an operating-system command
System command1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.