Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/AICourseGenerator/Services
994a3d423e7dee2f…
153.3 KB
JS · assets/js
dfcba8e1a5174443…
109.9 KB
PHP · src/AICourseGenerator/Controllers
01f3ea8627f221e3…
104.3 KB
PHP · src/AICourseGenerator/Controllers
8c854511c87fd7b8…
84.6 KB
PHP · src/AICourseGenerator/Services
3065a1b54079f6b1…
81.6 KB
PHP · src/AICourseGenerator/Services
c7c08d09cf57e71e…
62.8 KB
JS · assets/js
7a67904e3373e6de…
61.5 KB
PHP · src/AICourseGenerator/Services
989a125211f7eb65…
58.5 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
unserialize
Unsafe when given untrusted input
Deserialization1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.