Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · views
e4f4de5e5c64baa2…
12.7 KB
PHP · package root
6d963471cd82df64…
9.0 KB
PHP · views
e1fd4c1dd1068b13…
6.3 KB
JS · js
ed76e371bdb27238…
5.6 KB
TXT · package root
a41cd3238c052e37…
3.8 KB
PHP · package root
76b4eb36d9bc6a60…
3.5 KB
CSS · css
ff54f5a470669916…
2.7 KB
JS · js
9777097d4195f729…
1.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.