Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MD · vendor/stripe/stripe-php
0e385ae00527a1bf…
276.4 KB
CRT · vendor/stripe/stripe-php/data
f1407d974c5ed87d…
219.8 KB
PHP · vendor/stripe/stripe-php/lib
32cdc790ec1de453…
148.4 KB
PHP · inc
d52b38612b895554…
71.9 KB
PHP · vendor/stripe/stripe-php
96adf9776cff15d5…
59.7 KB
PHP · vendor/stripe/stripe-php/lib
c7e3cd46c39066ec…
59.5 KB
PHP · vendor/stripe/stripe-php/lib/Service
8238dd0e0a9852a9…
49.2 KB
PHP · vendor/stripe/stripe-php/lib
b544b6c8518478b0…
47.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.