Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · includes/assets/admin-app/dist
6e56f2ca5e13ed7c…
98.8 KB
PHP · package root
41527fbb32d8d84e…
94.0 KB
PHP · package root
3bdba752144a1c9c…
36.5 KB
PHP · includes/classes
ebdc62e66e107ed1…
33.0 KB
JS · includes/assets/js
83bf21c824be9e0e…
27.5 KB
PHP · includes/classes
c638c629e1a8cfef…
25.4 KB
PHP · includes/classes
955d513bf7ad67bc…
23.7 KB
JS · blocks/build
70f365be7b42dfb9…
21.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval
Executes a string as code
Code execution2
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.