Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · admin/assets/js
473ee39a9f53b544…
200.5 KB
JS · src
63bb91cffdd46ece…
135.0 KB
PNG · admin/assets/img
747b3d115d823b94…
84.5 KB
JS · admin/assets/js
00501810e93307a8…
69.2 KB
PHP · includes
8db73798c7648157…
68.8 KB
PO · languages
1c3924802960f410…
63.7 KB
PO · languages
d2f48437f3d9b3ec…
63.3 KB
PO · languages
4c1e89f08469b88c…
63.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.