This plugin will send an PDF attachment filled with form user data, via email after his registration on a form, it's easy and manageable in simple three steps, it has the most unique features, that cannot be found on any existing plugin on the market.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
Z · libs/tcpdf/fonts
c17cdde06e419b03…
1.75 MB
PHP · libs/tcpdf/fonts
6bccd83b4decefda…
1.51 MB
PHP · libs/tcpdf/fonts
776ec3b7b0b94ef9…
1.51 MB
PHP · libs/tcpdf/fonts
cc29a453a89e3021…
1.51 MB
PHP · libs/tcpdf/fonts
5d81733aab405f48…
1.51 MB
TXT · libs/tcpdf/fonts/dejavu-fonts-ttf-2.34
92027bc7c5389e02…
1.38 MB
TXT · libs/tcpdf/fonts/dejavu-fonts-ttf-2.33
7cc471deab9e8ef0…
1.34 MB
JS · admin/js
03c198c37d42832e…
1.23 MB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request6
gzinflate
Decompresses a string in memory
Obfuscation5
new Function()
Builds a function from a string
Code execution4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
unserialize
Unsafe when given untrusted input
Deserialization3
atob
Decodes base64 in the browser
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.