Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · class
a25186043cf5f886…
49.9 KB
PHP · class
1badc94f1598b24c…
33.5 KB
PO · languages
5b2ac67a66c9ce33…
26.1 KB
PO · languages
9effb9c21c1d2732…
21.1 KB
PO · languages
52c455278b90186e…
21.0 KB
PO · languages
d44764f6dc0a6fa9…
20.8 KB
PO · languages
371156888b9d2d14…
20.6 KB
JS · js
32cc0d3f4e52ad2f…
14.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.