Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · includes/CMB2
1e4ff28fad675d91…
85.4 KB
MD · includes/CMB2
2ad003039b77d432…
70.9 KB
PHP · includes/mailchimp/Mailchimp
b6639123633cefd1…
57.9 KB
PHP · includes/CMB2/includes
5fbbdf9795352601…
49.8 KB
CSS · includes/CMB2/css
213011f1933c6365…
48.0 KB
CSS · includes/CMB2/css
ef2e39ad5fa4e381…
48.0 KB
CSS · includes/CMB2/css
eedc47fe0e6b50bb…
41.6 KB
CSS · includes/CMB2/css
b8d3fcedadefae10…
41.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.