Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/admin
5b3b1db9e56b2a20…
28.6 KB
POT · languages
e4e0e9b2f8ed8e80…
8.3 KB
PHP · includes/restriction
7dc1bf2409d0c742…
8.1 KB
PHP · includes/restriction
269e73d30e6f2fba…
6.6 KB
PHP · includes/restriction
8d48d4a0230c4ac0…
4.1 KB
PHP · includes
3e5d131cc16f0b5c…
3.7 KB
JS · assets/js/admin
2a2da587b8b74971…
3.7 KB
PHP · includes/restriction
cf7b2dc362056780…
2.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.