Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/Frontend
1259b8736c4835c9…
21.7 KB
PHP · src/Admin
c62ac7856400d985…
18.4 KB
PHP · src/Admin
e7259b2b34fa3d92…
18.0 KB
PNG · assets/images
bc540a42a5149692…
16.0 KB
PHP · src/Functions
8228d72652aa1a2d…
12.7 KB
POT · languages
28bc3763d94c01fc…
8.0 KB
PHP · package root
fa982df7099bb763…
7.5 KB
PO · languages
618baba5ae7a3e6a…
6.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.