Access a huge collection of pre-made templates you can import on your website and customize on the frontend using the tagDiv Composer plugin. Built on 21.07.2026 11:28
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
…
3.32 MB
PHP · includes
5943fabf624548f3…
387.1 KB
JS · assets/js
ebfcb9787f7b8b11…
334.9 KB
PHP · includes
dac1c9f70db2c1f9…
180.8 KB
PHP · state/single
f28ace1a3831981a…
172.7 KB
PHP · shortcodes/common
7c84a1b84b4946a6…
126.5 KB
PHP · shortcodes/header
f2693a343e67be2c…
113.0 KB
JS · assets/js
58e547c1da61c634…
105.6 KB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation219
atob
Decodes base64 in the browser
Obfuscation8
unserialize
Unsafe when given untrusted input
Deserialization3
new Function()
Builds a function from a string
Code execution3
file_get_contents(url)
Fetches a remote URL
Remote request1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.