Groovy Mega Menu – Responsive Mega Menu Plugin for WordPress
File type
ZIP archive
File size
1.76 MB (1,845,800 bytes)
Uncompressed size
5.55 MB
Oldest file
2026-10-24 19:29
Newest file
2026-10-24 19:29
Archive contents
Contained entries
429
Files
429
Directories
0
Distinct types
20
Analysis history
Last analysis
Oct 26, 2026, 06:53 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#199403
Archive contents
429 entries · 20 types
PHP50.1%215
PO8.4%36
MO8.4%36
CSS5.1%22
PNG5.1%22
JSON4.9%21
SVG4.2%18
JavaScript3.7%16
No Ext2.6%11
Lock2.3%10
JPEG1.9%8
WOFF0.7%3
JSX0.5%2
Text0.5%2
POT0.5%2
Markdown0.2%1
XML0.2%1
WebP0.2%1
WOFF20.2%1
CRDOWNLOAD0.2%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
c51d594fcefc750e…
646.3 KB
JS · assets/js
c9ab2c2dfc13685a…
503.2 KB
PHP · includes
aef9fd7a2d15afe1…
473.8 KB
PHP · includes/config
992c49fb034a8cd5…
266.1 KB
PO · languages
aa81b02510fb7ea3…
209.5 KB
JS · assets/js
8ebcae5302c6dbbf…
193.0 KB
POT · languages
995addcb233e9cf5…
144.9 KB
PHP · includes/modules/core/inc
ff34f562c7337ac7…
131.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation5
eval (JavaScript)
Executes a string as code
Code execution2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.