Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · core/external/hub-connector/assets/css
1ae04e1b9e1031d0…
1.07 MB
JS · app/assets/js
04b5575ecbf03a5b…
981.5 KB
JS · app/assets/js
052cd486accad5fa…
851.4 KB
JS · app/assets/js
7baf9f2caa49df80…
846.6 KB
MAP · core/external/hub-connector/assets/js
124998b7d5c95cad…
843.9 KB
JS · app/assets/js
c0a91d12f84a26b6…
822.9 KB
JS · app/assets/js
c0cf6c5ae0af7a57…
813.8 KB
JS · app/assets/js
b7ce92b19522d281…
779.7 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution7
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation7
unserialize
Unsafe when given untrusted input
Deserialization3
exec / system
Runs an operating-system command
System command2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.