Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · inc/elementor
9cab3675ccf4aa5f…
416.3 KB
PHP · inc/elementor
8d39fd84e7399f0a…
187.4 KB
PO · languages
e4fb226b7a8f6839…
169.6 KB
POT · languages
bb5539be2ac24bee…
157.7 KB
PO · languages
673703acdeea596e…
153.7 KB
PHP · inc/features/puc/vendor
5a1d8f0c597d6f4d…
38.2 KB
PHP · inc/features/puc/vendor
d3ce3e720b30cab1…
37.9 KB
JS · inc/elementor/templates
a931e5af561b1f0e…
34.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.