Auto translation addon for Loco Translate – translate plugin & theme strings using AI tools like Google Translate, DeepL, ChatGPT, Gemini, OpenAI & more.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · vendor/wordpress/wp-ai-client
c0545938fecb9f68…
758.5 KB
PNG · admin/atlt-dashboard/images
bb5cff4240fb1ecd…
569.2 KB
PNG · admin/atlt-dashboard/images
b4a544a144813f93…
379.2 KB
PNG · admin/atlt-dashboard/images
9c0b10de332bd4d3…
366.6 KB
PNG · admin/atlt-dashboard/images
7bc253ea39b0f721…
366.4 KB
PNG · assets/images
dcfa1aa7253d0bff…
314.2 KB
LOCK · vendor/wordpress/php-ai-client
34ec9e55efc58d1b…
139.9 KB
LOCK · vendor/wordpress/wp-ai-client
fe6be4440856cd2a…
130.1 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
curl_exec
Makes an outbound HTTP request
Remote request3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.