Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · braintree/lib/Braintree/Error
063a7ab3b5613558…
54.4 KB
PHP · braintree/lib/Braintree
18804bbef4da9249…
22.5 KB
PHP · braintree/lib/Braintree
9085f5dd32ef5c74…
21.0 KB
MD · braintree
d1faeb63fa1ee9ca…
20.8 KB
PHP · braintree/lib/Braintree
3cd0acc040d755a8…
20.1 KB
PHP · braintree/lib/Braintree
fe13aa75a4289946…
19.5 KB
PHP · braintree/lib/Braintree
529a54178af83c64…
17.1 KB
PHP · braintree/lib/Braintree
2dc9c1737c5ff8a0…
16.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
15 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.