Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · migration/buddyboss-forums
b7ab10c061affdb0…
76.5 KB
PHP · migration/buddyboss-forums
a46735086983812c…
68.9 KB
PHP · migration/peepso/includes/helpers
7178570f8f5601ac…
53.8 KB
POT · languages
1869e353d8524138…
51.3 KB
PHP · migration/buddyboss-forums
4af805c75384c959…
50.1 KB
JS · assets/build
1e05df8e5377ae54…
49.2 KB
PHP · sample-data
63db34aadd622f55…
46.1 KB
PHP · migration/buddyboss-forums/converters
8b6455cafde2b43e…
37.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization40
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.