Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · lib/vendor/publishpress/publishpress-permissions/languages
d148d4abe83b9459…
302.4 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
78dca8ad2e876c19…
288.5 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
8766349a4466b3a7…
284.1 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
3f0f3fbf2df99f39…
283.4 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
2367bee91083c371…
276.6 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
821954d932cffec0…
264.5 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
febfa728978b0871…
256.5 KB
PO · lib/vendor/publishpress/publishpress-permissions/languages
dda9aae1c2bde123…
253.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.