Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
2.32 MB
PHP · includes
ba73657625fc1591…
80.0 KB
TXT · Licensing
8ceb4b9ee5adedde…
34.3 KB
JS · js/colorpicker
f08d5f670edeae04…
25.6 KB
PHP · includes/templates/gift-template-a
8d10aceeecee7ffa…
23.8 KB
JS · js
7e1e353d13b7b2d3…
14.1 KB
GIF · images
a808dc2b2b23e912…
8.6 KB
PO · languages/New folder
7f6892ecc3082fd6…
8.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.