Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
95dd7e8e2586eb8a…
759.0 KB
POT · languages
7401d64df39ec309…
370.5 KB
JS · public/admin/_commons
c8aec4ad468132aa…
250.9 KB
JS · assets/js
2f27bcf471b2d69d…
203.5 KB
PHP · vendor/phpseclib/phpseclib/phpseclib/Net
c89373032b3a5e9b…
194.1 KB
JSON · package root
70e7363765ce2bb0…
181.3 KB
PHP · inc/admin/metaboxes
b277aa9507118128…
172.3 KB
PHP · vendor/composer
498745a191d2eb3b…
155.3 KB
Code signals
8 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command20
eval
Executes a string as code
Code execution14
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation11
curl_exec
Makes an outbound HTTP request
Remote request5
new Function()
Builds a function from a string
Code execution4
unserialize
Unsafe when given untrusted input
Deserialization4
shell_exec
Runs an operating-system command
System command3
assert
Can execute a string as code on old PHP
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.