Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · app/Setup
b7fa4c158791b603…
21.1 KB
JSON · package root
c85e24a0a5dd6ccf…
19.2 KB
JS · assets/js
02da0b84bff0c656…
12.6 KB
CSS · admin/css
484dfd7316e8e71d…
9.8 KB
PHP · app/Email
b393df0b6032f99e…
9.2 KB
SCSS · assets/scss/frontend
e5328710335f57fe…
9.0 KB
PHP · app/Database
26929d10d6d3bf60…
8.6 KB
CSS · assets/css
375812829dab60eb…
8.6 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.