Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
fbb49d915a8ecaf6…
47.5 KB
PHP · templates
ce5b401f24cf13da…
5.0 KB
POT · langauges
0b2c3c6ae9b44fa3…
3.3 KB
TXT · package root
0d6a0687b1009cad…
3.1 KB
JS · design/js
617305bbc24e8db6…
3.1 KB
CSS · design/css
551db7acbf14e934…
1.9 KB
TXT · ait-item-extension
6313557e1317c9bf…
0.4 KB
_AIT-ITEM-EXTENSION · package root
698272faa4495cee…
0.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.