Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · lib/skyverge/woocommerce/i18n/languages
c990b06590ddd78a…
56.9 KB
PHP · includes/admin
499a68d5f3285c6d…
53.3 KB
POT · lib/skyverge/woocommerce/i18n/languages
55ae528e996f5662…
53.0 KB
POT · i18n/languages
23072fbf9ea098a3…
52.8 KB
PHP · includes
ed377ca80ad9b49a…
52.0 KB
PHP · includes/admin
7a5020c0a836cca2…
37.6 KB
TXT · lib/skyverge
906af23e38c89568…
35.1 KB
PHP · lib/skyverge/woocommerce
9a55f0300b44c699…
34.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
19 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.