Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/plugins/turf
361b6293e2b7c4e4…
556.5 KB
SVG · assets/fonts/fonts-awesome/fonts
ad6157926c1622ba…
434.0 KB
SVG · libs/fat-cmb/assets/css/font-awesome/fonts
ad6157926c1622ba…
434.0 KB
JSON · libs/fat-cmb/assets/fonts
92b9c47b6a0f502e…
399.1 KB
JS · libs/fat-cmb/assets/js/ace
c71efa12643603e2…
346.0 KB
SVG · assets/fonts/simple-icon/fonts
51c5b7fbb6ad58d6…
233.4 KB
PHP · inc
93e440afa0117f78…
230.5 KB
JS · assets/plugins/fullcalendar
42f84fabe7af3637…
208.8 KB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization24
new Function()
Builds a function from a string
Code execution7
curl_exec
Makes an outbound HTTP request
Remote request7
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
gzinflate
Decompresses a string in memory
Obfuscation4
shell_exec
Runs an operating-system command
System command2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.