Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
41aefb1e3684656d…
90.4 KB
PNG · images
53c9f67cd9571339…
76.4 KB
JS · js
346169f10f02e119…
61.3 KB
JS · js
4899b1aea98e4879…
61.3 KB
PHP · package root
b48e8429f043e9a4…
45.1 KB
PHP · lib/updater
f073c53928c0b42f…
21.8 KB
CSS · css/ui-smoothness
a584bbfe5b296e6e…
20.6 KB
PHP · classes
3a91a4a0987d212e…
18.1 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
eval
Executes a string as code
Code execution3
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.