Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · lib/updater
e778546bd4163fa5…
35.1 KB
POT · lang
2615166a00aa083a…
15.6 KB
PHP · lib/updater
eae3a21f469b99f4…
13.4 KB
PHP · includes/libraries
5c24d95cdbaabade…
12.1 KB
PHP · lib/updater
3204022d9ce15155…
9.9 KB
PHP · lib/updater
b84d04c765e72638…
9.8 KB
PHP · lib/updater
909c59af8aed45a9…
7.9 KB
PHP · lib/updater
20f422fe3f1a6193…
7.7 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.