Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
95b50d3e3cbaf5ea…
21.1 KB
PHP · includes/admin
49f5ab8c09e4175e…
4.7 KB
PHP · Paymill/Apiclient
ad3b5a1dfc0f6f7a…
4.5 KB
POT · languages
4a36549efbda4792…
4.1 KB
PHP · Paymill
7667428f73b3f624…
3.3 KB
PHP · includes/admin
c15048ae1d28a8b5…
2.8 KB
TXT · package root
f3b9c60ffe3ac122…
2.6 KB
JS · assets/js
57d3436738f09a4b…
2.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.