Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/Admin
9f285645fc8cce08…
24.0 KB
PHP · src/Admin
c93f4554b376dec2…
19.4 KB
PHP · src/Frontend
e7fa1e77136fd491…
17.4 KB
JS · assets/js/dist
3fcec7ae733b419b…
17.0 KB
MAP · assets/css
c131e5b709c67e0e…
16.2 KB
PHP · src/Admin
c29ee216c815c765…
14.7 KB
PHP · src/Admin
b0ddf8492d241c87…
13.4 KB
SCSS · assets/scss
d6c7ad4c22167073…
13.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.