Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · divi-5/scripts
de1e37750b1b88d6…
121.6 KB
JS · divi-4/scripts
293cd3c332540a97…
77.4 KB
PHP · divi-4/modules/DnxtMasonaryGallery
54d471b097f7630f…
70.4 KB
CSS · divi-4/styles
495f7ed2964bb9aa…
69.0 KB
CSS · divi-5/styles
2b1a027c7fcc4651…
55.0 KB
CSS · divi-4/styles
4e80fc16e2ef76d6…
54.7 KB
CSS · divi-5/assets/css
e84e7f83bea8c18c…
51.0 KB
CSS · divi-4/styles
f86e72fb2091c61f…
49.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.