Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · assets/js
c648c38e0a0a2dbc…
29.4 KB
PHP · includes
49ef0f9a8f15f415…
25.2 KB
PHP · includes
a412bdfa7e7f0f06…
17.9 KB
PHP · includes
ae8ca30a3722e24b…
16.3 KB
JS · assets/js
58e682a479e8a48f…
16.1 KB
JS · assets/js/dev
a457f46ac46ece14…
14.8 KB
PHP · includes/lib/affwp
e54bd0abdea358a8…
14.0 KB
PHP · deprecated
710d1b9a6bac2463…
11.3 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.