Popup Plugin for WordPress & Popup Editor – Master Popups for Email Subscription
File type
ZIP archive
File size
6.34 MB (6,650,466 bytes)
Uncompressed size
12.79 MB
Oldest file
2026-10-24 22:49
Newest file
2026-10-24 22:49
Archive contents
Contained entries
1617
Files
1617
Directories
0
Distinct types
28
Analysis history
Last analysis
Oct 26, 2026, 06:53 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#199423
Archive contents
1617 entries · 28 types
PHP61.4%993
SVG13.7%222
PNG10%161
JPEG3.3%54
JavaScript3.1%50
JSON2.3%37
CSS2.2%35
Text0.6%9
WOFF0.4%7
MP30.4%6
PO0.2%4
MO0.2%4
WOFF20.2%4
TTF0.2%4
EOT0.2%4
SCSS0.2%3
Lock0.2%3
No Ext0.2%3
XML0.1%2
POT0.1%2
GIF0.1%2
NEON0.1%2
HTML0.1%1
CACHE0.1%1
INC0.1%1
OGG0.1%1
PEM0.1%1
SWF0.1%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · libs/xbox/libs/ace
755a5c026a4006f1…
392.5 KB
JS · libs/dataTables
b68b96303c584f99…
289.1 KB
PEM · libs/integrations/Infusionsoft
3cdd33145eb94038…
246.0 KB
JS · libs/videojs
fc3ceadb26d80d10…
245.3 KB
JS · libs/xbox/libs/ace
1f35cf1982faca20…
212.3 KB
PNG · assets/images
3ec514cc471e96d1…
192.5 KB
PNG · assets/images
e89eae03c1317a2b…
183.9 KB
JPG · assets/images
0bff8f70b8212324…
180.2 KB
Code signals
9 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request17
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation8
unserialize
Unsafe when given untrusted input
Deserialization4
file_get_contents(url)
Fetches a remote URL
Remote request3
eval
Executes a string as code
Code execution2
gzinflate
Decompresses a string in memory
Obfuscation2
assert
Can execute a string as code on old PHP
Code execution2
eval (JavaScript)
Executes a string as code
Code execution2
exec / system
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.