Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · build
38bcc6227b2ef7ad…
218.8 KB
JS · build
e61dba6bc5466d73…
203.6 KB
PHP · app/controllers
727f039a8428c965…
54.4 KB
CSS · css
8b9e44b1a7ac5901…
39.9 KB
PHP · app/controllers
9917ae408e255998…
36.7 KB
PHP · app/controllers
93de5c08aab72f46…
35.5 KB
PHP · app/controllers
89f61239a7e4ee33…
35.0 KB
PHP · app/lib
db04452a01c721cf…
29.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command2
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.