Gravity Forms BTCPay Add-On · Oct 02, 2026, 06:32 PM UTC
Cleanzip9 entriescrc-verifiedjavascriptcsstext
ZIP
0.19 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Gravity Forms BTCPay Add-On
Version
0.1.0-alpha.1
Version check
Match
package and product page both state 0.1.0-alpha.1
Author
Gravity Forms
Author URI
https://gravityforms.com
Project URI
https://labs.gravity.com/btcpay
Description
Accept Bitcoin and Litecoin payments on your Gravity Forms via a self-hosted or third-party-hosted BTCPay Server. Non-custodial, no KYC, no third-party validation service.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
9ac49b5c3ef6e8ff…
151.7 KB
PHP · includes
578b45fcbb3d1822…
12.9 KB
POT · languages
0cb137780fdfc126…
12.0 KB
JS · assets/js
1dde6159f94eab26…
5.5 KB
PHP · package root
f7f289e0e498eade…
2.5 KB
CSS · assets/css
fd1905d9d5afb701…
2.3 KB
SVG · images
8dbb9286e42ab394…
1.6 KB
PHP · package root
9403248e869af1f8…
1.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.