Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · widgets
e9b67c8d9376a9e5…
36.4 KB
JS · js
9309e625c6e69594…
12.5 KB
CSS · css
55b11d66b9333a57…
12.0 KB
POT · languages
cd02a0cb186bfea6…
9.1 KB
JS · js
15f4604785ddbe6f…
3.1 KB
PHP · package root
8ac7b04cd3ddaede…
2.8 KB
PHP · countdown_for_elementor/widgets
ebe716c9084e430c…
0.2 KB
HTML · css
0a6d407700b3be50…
0.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.