Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/admin
430cbd3e01c5e45a…
32.0 KB
PHP · includes
dfea262cbbd5962b…
30.4 KB
PHP · includes/lib/mailchimp
b70c482f1b5ad15a…
15.7 KB
PHP · includes/lib/mailchimp
1a936243a47330e0…
12.1 KB
PHP · includes
b1d7d734814a066a…
8.2 KB
CSS · assets
60f54f0060ef36cf…
7.3 KB
TXT · package root
d738be0d1785b3a0…
6.4 KB
PHP · templates
85cec506a2510009…
5.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.