Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPEG · assets/images
9e94856784e9cddc…
33.6 KB
PHP · src/Frontend
551b06f1b00b62c2…
25.8 KB
PHP · src/Admin
f1efcbd24d4e5c75…
21.5 KB
PHP · src/Admin
73fe4dc5fcbd9c6b…
19.4 KB
PNG · assets/images
bc540a42a5149692…
16.0 KB
PHP · src/Functions
f053170f12619565…
14.5 KB
PHP · package root
cc1fa14c769edeac…
10.8 KB
POT · languages
b4d483d4bb2ae7eb…
7.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.