Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · vendor/campaignmonitor/class
61e549da012d320a…
242.6 KB
PHP · vendor/campaignmonitor/class
51a2d1d97edcb08a…
32.4 KB
PHP · vendor/campaignmonitor
5816034ae74191cf…
26.2 KB
PHP · vendor/campaignmonitor
dd1951a31409bd05…
20.8 KB
PHP · vendor/campaignmonitor
3a9ad4e05d4619d5…
19.0 KB
PHP · package root
4a4f08fe6e31b858…
14.7 KB
PHP · vendor/campaignmonitor/class
032a69bb770dd41b…
12.0 KB
PHP · vendor/campaignmonitor/class
1ea8f313f2fb3010…
10.3 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution1
gzinflate
Decompresses a string in memory
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.