Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
18803235f3c0bd28…
25.5 KB
JS · js
37afb31a9d46fc5f…
15.9 KB
PNG · images
c65acfbc5b1da56e…
10.1 KB
JS · js
b98c68caa6093825…
8.1 KB
PNG · images/widget
95979c95c533724b…
7.4 KB
PHP · package root
816bfd9de0d27fa4…
7.2 KB
JPG · images/widget
3220c8a603b9f95f…
6.5 KB
PNG · images/widget
171869b915c9da8d…
6.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.