OboxTheme Express WordPress Theme · Sep 10, 2026, 08:23 AM UTC
Cleanzip325 entriescrc-verifiedpngphpcss
ZIP
0.77 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Express
Version
1.2.2
Version check
Match
package and product page both state 1.2.2
Author
Obox Design
Author URI
http://www.oboxthemes.com
Project URI
http://www.oboxthemes.com/theme/express
Description
A one page theme for freelancers and small business owners who want to get the job done. Featuring 7 unique post types and a great user experience, there is no better theme for your business.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
19f92e81aabaac40…
152.5 KB
CSS · package root
9ce4f600d9feb7a8…
52.1 KB
PNG · images
7acaede43eaaa0b3…
47.1 KB
PO · lang
8d0b6abb9efbf4ee…
35.1 KB
PNG · images/layout/social-icons
b56ddb617cbe7a14…
34.5 KB
PHP · ocmx/theme-setup
8d41850eb3bb2758…
33.9 KB
CSS · ocmx
a3cf64c2683fc97d…
26.2 KB
PNG · ocmx/images
692253fc5d9dd345…
25.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution13
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.