Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · vendor/handsontable/dist
b3756157c8626a37…
996.0 KB
JS · vendor/handsontable/dist
afbd8c81acfed7f5…
776.8 KB
JS · vendor/handsontable/dist
5d81a7ffd4853473…
462.4 KB
JS · vendor/handsontable/dist
428c2941ad72f449…
385.5 KB
PHP · vendor/adodb/adodb-php
dba762c9ef8e40f3…
136.0 KB
PHP · lib/tgmpa/tgm-plugin-activation
78063670901c490c…
124.3 KB
JS · vendor/handsontable/dist/moment
330b77f348bc9784…
102.0 KB
JS · vendor/handsontable/dist/zeroclipboard
e802dd834ca11185…
83.6 KB
Code signals
7 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
assert
Can execute a string as code on old PHP
Code execution25
unserialize
Unsafe when given untrusted input
Deserialization9
exec / system
Runs an operating-system command
System command3
eval
Executes a string as code
Code execution3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
preg_replace /e
The /e modifier executed the replacement as code
Code execution1
gzinflate
Decompresses a string in memory
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.