Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/libs/api
af0789b3b6fc739d…
18.0 KB
TXT · package root
087a8caa47236aa6…
14.8 KB
PHP · includes/core
cf974efc9b7351a9…
13.6 KB
PHP · includes/libs/api
8f29264e8deddbac…
9.9 KB
JS · assets/js
953d5fa3e0e26fd1…
9.4 KB
PHP · includes/core
4de0515741b64058…
8.0 KB
JS · assets/js
2e295094828d068a…
6.8 KB
PHP · includes/admin
c4cad49a65d1f804…
4.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.