Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
41aefb1e3684656d…
90.4 KB
PNG · images
53c9f67cd9571339…
76.4 KB
PHP · package root
480fda07bf79a26d…
58.5 KB
PHP · lib/updater
004fc49a12307f0f…
21.9 KB
JS · js
b783b712c96c2bca…
19.0 KB
JS · js
25da469c95327acd…
16.3 KB
POT · lang
2fd6c1baf236ca41…
10.3 KB
PHP · lib/updater
b84d04c765e72638…
9.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.