Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CRT · libs/stripe/data
38b6230aa4bee062…
218.8 KB
PHP · includes
78301a9319d58665…
39.6 KB
PHP · includes
eb04d6baa3ca46ef…
29.4 KB
PHP · includes
af38c234a302e58e…
18.7 KB
PHP · libs/stripe/lib
0b6084ded8bcc7d4…
18.7 KB
PHP · libs/stripe/lib
e54e5a20bec86352…
18.4 KB
PHP · includes/admin
848cc0e2cc8f7091…
18.2 KB
PHP · includes
045f3d353215ad2e…
17.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.