AI ChatBot for WooCommerce with ChatGPT, Retargeting, Exit Intent
File type
ZIP archive
File size
13.16 MB (13,794,667 bytes)
Uncompressed size
31.96 MB
Oldest file
2026-10-24 21:49
Newest file
2026-10-24 21:49
Archive contents
Contained entries
3235
Files
3235
Directories
0
Distinct types
38
Analysis history
Last analysis
Oct 26, 2026, 06:53 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#199427
Archive contents
3235 entries · 38 types
PHP43.1%1394
INC19.8%641
XML12.2%394
FIXED7.7%250
JavaScript3.3%107
PNG3.2%103
CSS2.5%81
Markdown1.5%47
JPEG1.2%39
Text1.1%36
HTML0.9%30
No Ext0.7%22
JSON0.6%18
DIFF0.3%10
GIF0.2%8
YAML0.2%7
SVG0.1%4
WOFF0.1%4
WOFF20.1%4
BAT0.1%4
TTF0.1%3
EOT0.1%3
DIST0.1%3
Shell0.1%3
PO0.1%2
MO0.1%2
OTF0.1%2
CSV0.1%2
DB0.1%2
TOML0.1%2
POT0%1
WebP0%1
CONF0%1
Lock0%1
MP30%1
SAMPLE0%1
XSD0%1
ZIP0%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/php-stubs/wordpress-stubs
…
5.03 MB
GIF · images
…
2.59 MB
JS · js
cda49954611d5857…
835.6 KB
JPG · images
c359b508e36e345f…
770.1 KB
MD · vendor/squizlabs/php_codesniffer
b9f20ff88cdc91e0…
569.8 KB
JS · vendor/extended-search-addon/js
e22d8a1584df176d…
458.9 KB
SVG · fonts
fc378232f9dad500…
436.6 KB
SVG · qc-support-promo-page/fonts
ad6157926c1622ba…
434.0 KB
Code signals
11 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request64
unserialize
Unsafe when given untrusted input
Deserialization61
eval
Executes a string as code
Code execution29
exec / system
Runs an operating-system command
System command17
shell_exec
Runs an operating-system command
System command13
eval (JavaScript)
Executes a string as code
Code execution8
assert
Can execute a string as code on old PHP
Code execution5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
gzinflate
Decompresses a string in memory
Obfuscation2
file_get_contents(url)
Fetches a remote URL
Remote request1
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.