Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
bc79116a96b14f0d…
12.1 KB
PHP · actions
c00fcb59c4823a22…
9.2 KB
SVG · package root
e034a6bb75bf0ea4…
7.7 KB
PHP · actions
ecfb3f696d93e3f2…
7.1 KB
PHP · package root
5f29a8433193be56…
6.0 KB
POT · package root
4df17be86ba2beb3…
5.2 KB
PHP · package root
e2fea84eabaaabd4…
4.9 KB
CSS · css
8993da4dd07db85f…
4.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.