Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · layouts/default
c9d39ea3c9972d12…
31.5 KB
PHP · lib/updater
203d8460707e2147…
21.6 KB
PNG · layouts/borders-blue
5e6a42a9b09db6a7…
16.4 KB
PNG · layouts/light-header
86fa3f3289b4aae8…
16.0 KB
JS · js
5ba1e64ae55a97c9…
15.8 KB
PNG · layouts/border-green
75282fc7e668e266…
15.7 KB
PHP · package root
f362bb1332c34ef8…
15.6 KB
PNG · layouts/standard-dark
564af0b345b9f1ad…
14.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.