Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · config
4c069e2405aa218f…
6.4 KB
PHP · classes
8fc87e3c7ed9c544…
5.4 KB
PHP · classes/Filtering
66f0a1851ad88e18…
3.5 KB
TXT · package root
dd5a23be29f7017d…
2.6 KB
PHP · classes/Filtering/Profile
cb32ea65d3a943c9…
2.4 KB
PHP · classes/Settings
e03462ccaa5e3348…
2.1 KB
PHP · classes/ListScreen
bacc3b6a793b2102…
2.0 KB
PHP · classes/Column
eb476823b8761002…
2.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.