Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · package root
c5c7000c5a6a5d45…
618.1 KB
LOCK · package root
4d9350881f8849b6…
80.1 KB
SCSS · assets/css
e1cb5a2a834b927f…
30.8 KB
PHP · includes
c015017ffed75cda…
18.7 KB
FILE · package root
8177f97513213526…
17.7 KB
PHP · includes
2201cc84cda6ba83…
16.5 KB
PHP · includes
be92c7cdda8ea7c7…
13.3 KB
PHP · includes
d1a39440e567985e…
12.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
15 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.