Viral Quiz Maker – OnionBuzz for WordPress · Sep 08, 2026, 11:44 PM UTC
Cleanzip292 entriescrc-verifiedphpjavascriptsvg
ZIP
2.88 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
OnionBuzz
Version
1.2.4
Version check
Match
package and product page both state 1.2.4
Author
Looks Awesome
Author URI
https://looks-awesome.com
Project URI
http://onionbuzz.com
Description
OnionBuzz provides entertaining, viral content and quizzes worth sharing with friends. We are focused on community-based and powerful buzz tools for our audience.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
d900fdcc272605f9…
1.45 MB
SVG · onionbuzz/static/fonts
136286169851c0cf…
321.1 KB
SVG · onionbuzz/static/fonts
809406602c8f0265…
319.1 KB
SVG · onionbuzz/static/fonts
222e5e68f6cabbc9…
318.6 KB
JS · onionbuzz/static/vendors/jquery-ui
f575ccf0a4713d70…
247.7 KB
CSS · onionbuzz/static/vendors/bootstrap/css
717b1fd916943f6f…
149.6 KB
EOT · onionbuzz/static/fonts
cf93deed68f62e0c…
138.6 KB
EOT · onionbuzz/static/fonts
c2bb688148e1c8cf…
138.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.