Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
33c3b35df13ceff0…
52.5 KB
PHP · twitter/lib
ca8ea8692c95e8a5…
26.2 KB
JS · assets/js
f60c8f58d3a1d482…
19.3 KB
PHP · linkedin
99983cafb0c7f517…
10.1 KB
PHP · twitter
e7f75ec17a8db8af…
7.9 KB
CSS · assets/css
98ba2b13fc00b5a9…
7.8 KB
JS · facebook/assets/js
e33b2b4463396b8a…
7.7 KB
PHP · twitter/lib
9322f14f6e90e0fe…
7.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.