Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
c6793fb9a95326ff…
30.4 KB
PHP · package root
9da893e8f67f33f9…
26.8 KB
PHP · includes
59804ae6c1bedfb7…
26.6 KB
PHP · includes
240a248ea0e78d1e…
25.7 KB
PO · languages
0e5b9728640e832f…
16.1 KB
PO · languages
c517e16bd6c3d800…
15.0 KB
PO · languages
5400bfff867cfc93…
14.9 KB
PO · languages
13d1bd88e02f5495…
14.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.