Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
d181f8689afa640b…
141.2 KB
PHP · includes
bfbdb0562e577fe1…
112.2 KB
PHP · includes
f7cec2eaa82a5b1d…
103.9 KB
PO · languages
32ad3f6e333411a3…
101.6 KB
PHP · assets/zip_arrays
ed86ccb454c709f8…
79.5 KB
PHP · includes
e0a453d6ba9c2e6f…
60.4 KB
PHP · includes/admin
7204b11ced75dae6…
55.0 KB
PHP · includes/admin/settings
10997fe48a6c1983…
53.0 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
file_get_contents(url)
Fetches a remote URL
Remote request1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.