Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · classes
3cf97c49431de9c3…
71.4 KB
PHP · classes/model
a8c12d0cac1aedde…
59.6 KB
PHP · views
9465f0aa0ed7fcc7…
31.2 KB
PHP · classes
4c43ec9c57a04f6e…
28.0 KB
PHP · classes/page
56d62cfb270787d1…
20.3 KB
PHP · views
e4b35060500c0743…
18.0 KB
PHP · classes/page
305fdd22a0a448b3…
14.9 KB
PHP · classes/page
0a39498f2fd31a13…
12.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.