Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/Framework/PaymentGateway
53ab4b7273e04289…
158.3 KB
JS · build
e9af7b96402378fa…
144.8 KB
LOCK · vendor/apimatic/core
f818cae891b83f35…
131.9 KB
LOCK · vendor/apimatic/unirest-php
a784be2c636daf50…
126.3 KB
POT · i18n/languages
e529890aef4d73a3…
122.0 KB
JS · build
350f2b8b909a6252…
116.3 KB
PHP · includes/Sync
7c221b5e83fb8f51…
115.4 KB
WOFF2 · build/fonts
6913e70da6f65d0d…
87.3 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
assert
Can execute a string as code on old PHP
Code execution17
exec / system
Runs an operating-system command
System command4
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
file_get_contents(url)
Fetches a remote URL
Remote request1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.