Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · languages
91cbf8d6161960a6…
795.8 KB
PO · languages
83e975963bac3e9d…
634.6 KB
PO · languages
a72a76f92e74d4be…
624.6 KB
PO · languages
1c50932083e3c769…
624.1 KB
PO · languages
00cbe286a6e06b1a…
619.2 KB
PO · languages
f0c57514c0aa24fa…
619.0 KB
PHP · classes
15e9b71242693f29…
502.3 KB
PHP · classes
39de3195317520dc…
477.3 KB
Code signals
8 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation59
unserialize
Unsafe when given untrusted input
Deserialization20
eval
Executes a string as code
Code execution15
exec / system
Runs an operating-system command
System command13
curl_exec
Makes an outbound HTTP request
Remote request4
assert
Can execute a string as code on old PHP
Code execution4
shell_exec
Runs an operating-system command
System command3
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.