Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
59203f9a313d6a9c…
35.7 KB
POT · languages
1562c576242738eb…
7.3 KB
PHP · Paymill-API/tests/Services/Paymill
e23c71329e1c8c69…
6.4 KB
PNG · images
6aff39b75e268532…
6.1 KB
PNG · images
67e758c861618c21…
5.9 KB
PNG · images
aeb700a2814d64a8…
5.8 KB
PNG · images
7b1261b5db33abfd…
5.8 KB
PNG · images
99cbdaa977259976…
5.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.