Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
af466fb05ccce752…
39.4 KB
PHP · includes
7ff062397c1f3a7e…
24.3 KB
PHP · includes
c37ece3ba5bd06f7…
22.9 KB
PHP · libs
5331ae9da6b45259…
12.2 KB
JS · js
d1a187dccf2e5eff…
9.6 KB
PHP · modules
5ddbd5e67a6d7266…
8.6 KB
PHP · modules
aaba08d22f81f973…
8.4 KB
PHP · modules
9244d9dc9d9dde77…
8.1 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request7
unserialize
Unsafe when given untrusted input
Deserialization5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.