Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
05a1383a3936e801…
5.8 KB
PO · i18n
cf27ac35b0fad789…
3.6 KB
PO · i18n
f098009f7b1e5ec0…
3.6 KB
PO · i18n
8bc40b6734bf859a…
2.9 KB
MO · i18n
98eedfdca504edbf…
2.5 KB
MO · i18n
d3e48dfda2e83c6c…
2.5 KB
PHP · package root
355ec3822c29f665…
1.4 KB
POT · i18n
3351a6434aee820d…
1.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.