Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · inc
c255b6242d85f486…
206.4 KB
CSS · assets/admin/css
ee72ee681bdd0d67…
198.0 KB
POT · languages
b4d3a1d628b81a03…
111.6 KB
CSS · assets/css/min
2ae5226eabfa2b05…
50.4 KB
JS · assets/js/min
3fc6d8d9d45405e6…
44.8 KB
PHP · elements
e4e2eb1461407fd4…
39.6 KB
JS · assets/admin/js
9b6720444667893b…
30.3 KB
PHP · elements
0585a555ad30ed00…
29.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.