Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · build
56c71456ada08277…
150.9 KB
PHP · app/controllers
d2059b3c4a009ec7…
71.7 KB
JS · brand/components
1bf713d671610a38…
65.2 KB
PHP · app/models
e39f940b667356ad…
44.7 KB
POT · i18n
4db54fc9396c0c0d…
41.2 KB
PHP · app/models
c96f97fe1882af32…
34.8 KB
PHP · app/helpers
ea239b819634eaa3…
34.1 KB
JS · public/js
8c0a3f5fffd8df95…
33.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command1
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.