Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · addons/video/assets/js/vendor
4cc8e00f9c76b046…
1.97 MB
JSON · addons/reactions/assets/icons/emojis
8ae80d1062469de2…
1.02 MB
JS · addons/video/assets/js/vendor
14e4968980df48e8…
617.8 KB
JS · addons/video/assets/js/vendor
c8a43a59d14787f1…
540.5 KB
PO · languages
20e4993fb446ad41…
330.4 KB
PO · languages
6407a8dba6b9a9ff…
289.4 KB
PO · languages
eb9f9ac41a29d8c2…
289.2 KB
PO · languages
9bae27ac9475dfb4…
287.7 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation17
exec / system
Runs an operating-system command
System command7
atob
Decodes base64 in the browser
Obfuscation3
curl_exec
Makes an outbound HTTP request
Remote request2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.