Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PEM · inc/libraries/ssl
7483b6a0307a3ae6…
253.0 KB
PHP · inc/libraries
b8f69073f17f9e4d…
18.0 KB
PHP · inc/libraries
dc33164648c5e97c…
17.9 KB
PHP · inc/libraries/shared
42477da8bb8b4aeb…
10.8 KB
PHP · inc/libraries/net/authorize/util
0fcccbbad3a65fb8…
10.7 KB
PHP · inc/libraries
cfaa589443c46c14…
9.3 KB
PHP · inc/libraries
8d3b96a5dbf5ce51…
8.6 KB
PHP · inc/libraries
f9d81b3f96899a5b…
6.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.