Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · lib/tmh-oauth
e065b2c2e410c2c0…
211.5 KB
PHP · pluginbuddy
0403be5be2716922…
51.0 KB
PHP · lib/tmh-oauth
d699c5dc78d97c90…
24.3 KB
PHP · pluginbuddy/classes
879dd0ab6b9d1873…
22.8 KB
PHP · lib/updater
957a7b4315e0cbe1…
21.6 KB
PHP · controllers/pages
e63ac0bd8c8f0b0c…
19.8 KB
PHP · pluginbuddy/classes
41cfd724b20ba537…
18.8 KB
TXT · package root
087a8caa47236aa6…
14.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution5
shell_exec
Runs an operating-system command
System command4
curl_exec
Makes an outbound HTTP request
Remote request1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.