Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · images
36ceced4b9e2fba9…
78.6 KB
PHP · lib/updater
e870893a9f04bc5a…
22.0 KB
PHP · package root
7b5e608c0244812d…
16.5 KB
TXT · package root
087a8caa47236aa6…
14.8 KB
TXT · package root
0f2c69fbd47e3135…
12.8 KB
PHP · classes
c6d59597c4d741d5…
10.5 KB
PHP · classes
5ac183393d55e02e…
10.2 KB
POT · lang
1d3827bf4fa13aeb…
9.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution3
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.