Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · modules/veb-variation-gallery/assets/css
3c880d4c0fd8e5b4…
148.0 KB
CSS · modules/veb-variation-gallery/assets/css
d8add406e1e70dda…
132.1 KB
JS · modules/veb-variation-gallery/assets/js
1911f0073de3698e…
75.1 KB
JS · modules/veb-variation-swatches-pro/assets/js
9344ea4b87f58394…
48.9 KB
PHP · modules/veb-variation-swatches-pro/includes
f05ca95ed73f9768…
44.2 KB
JS · modules/veb-variation-gallery/assets/js
d60643480342e1c7…
42.5 KB
PHP · modules/veb-variation-swatches-pro/includes
dfd1190851b7faba…
40.6 KB
CSS · assets/css
68dd9d61a62349bc…
39.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.