Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
bdc151162acd43eb…
78.6 KB
JS · assets/libs/magnific-popup
24403c5684e63bb0…
56.1 KB
PHP · includes/wpc-premium
c5468d62d0d0fb6f…
43.0 KB
CSS · includes/wpc-core/assets/css
e5adcb6af6e353ee…
35.9 KB
PHP · includes/wpc-core
e9e666afd4ca234f…
23.7 KB
JS · assets/libs/magnific-popup
3fddc6d28aba3c13…
19.7 KB
PHP · includes/wpc-core
b43875d830bb7d52…
19.5 KB
PHP · includes/wpc-premium
8f8c4ac95e7f71e0…
15.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.