Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
38430b6e7cc17340…
685.2 KB
POT · languages
3b2562644a250a41…
376.5 KB
PEM · vendor/grpc/grpc/etc
96143344c4ae1095…
258.2 KB
PHP · vendor/composer
8d16e7a7fb8fe8a2…
251.3 KB
JS · public/admin/_commons
c8aec4ad468132aa…
250.9 KB
PHP · vendor/composer
1c89fd08040e3654…
227.6 KB
JS · assets/js
2f27bcf471b2d69d…
203.5 KB
PHP · vendor/phpseclib/phpseclib/phpseclib/Net
33a98ef2e08d7435…
194.3 KB
Code signals
8 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
exec / system
Runs an operating-system command
System command20
eval
Executes a string as code
Code execution14
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation12
unserialize
Unsafe when given untrusted input
Deserialization6
curl_exec
Makes an outbound HTTP request
Remote request5
new Function()
Builds a function from a string
Code execution4
assert
Can execute a string as code on old PHP
Code execution4
shell_exec
Runs an operating-system command
System command3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.