Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · package root
d5590e1e77c51be2…
699.3 KB
PHP · app/lib/vendor
6676e5a5ea472977…
55.1 KB
JS · public/js/vendor
8250a1bc2682e882…
39.0 KB
JS · public/js/vendor
1fb6d8a00c3bdfca…
32.9 KB
CSS · public/css/vendor
0d52979e1bec69dd…
29.3 KB
JS · public/js/vendor/jquery_file_upload
ae0868fc46aa1f7a…
23.6 KB
CSS · public/fonts/fontello/css
34970f6b7938c285…
21.3 KB
PHP · app/lib
2a8d10cd97498cfd…
18.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.