Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · class
5ca2d151f614b85b…
47.4 KB
PHP · class
282b4f4180082cd9…
33.0 KB
JS · js
c75e7cdb81be6101…
14.8 KB
PHP · package root
b28c41e4c9404c34…
9.5 KB
PNG · images
4aa607db96014325…
6.2 KB
TXT · package root
fc32730af6cc72ce…
2.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.