Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/admin
be308173b12ab991…
18.0 KB
PHP · includes/lib/affwp
e54bd0abdea358a8…
14.0 KB
POT · languages
93731a7ed710a173…
11.3 KB
PHP · includes
a10fd07b03e45121…
7.5 KB
PHP · includes/REST/v1
588bdee1f680e37a…
5.9 KB
PHP · includes/REST/v1/affiliates
d3fbf18654820511…
5.8 KB
PHP · includes/REST/v1/referrals
6db5202cd0d9c9ff…
5.5 KB
PHP · includes/REST/v1/referrals
0ef969988a629cf3…
5.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.