Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/abilities/blocksy
b6d8e5a7fb198217…
184.6 KB
JS · novamira-visual/dist
a242a28fdf6e1781…
147.1 KB
JS · novamira-visual/dist
e3f852f17b15dc56…
146.3 KB
PHP · includes/abilities/elementor
8cde9848c0fe42bf…
140.7 KB
PHP · includes/abilities/fluentforms
1d25e996b304bcfb…
122.6 KB
PHP · includes/abilities/woocommerce
31ba08139b05e5af…
117.0 KB
PHP · includes/abilities/elementor
350a8cf9e41a4f14…
116.0 KB
PHP · includes/abilities/astra
c2a9a832c016531f…
90.3 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution37
exec / system
Runs an operating-system command
System command4
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.