Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SQLITE3 · extras/modules/role-editor/data
50b762c8b9679a59…
1.07 MB
MAP · dist
3d00d8e2a5dcc44b…
424.5 KB
MAP · dist
25c3f543a60373f5…
397.9 KB
SVG · extras/font-awesome/fonts
8e3586389bb4cd01…
382.4 KB
CSV · extras/modules/role-editor/data
2eaee97de50aa14f…
381.6 KB
JS · dist
617371e4d2f74630…
370.4 KB
JS · dist
5160e4ef86ffe314…
294.0 KB
PHP · includes
e6a556a665773a4d…
208.7 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation5
new Function()
Builds a function from a string
Code execution4
gzinflate
Decompresses a string in memory
Obfuscation3
unserialize
Unsafe when given untrusted input
Deserialization3
atob
Decodes base64 in the browser
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.