OboxTheme Foundation WordPress Theme · Sep 10, 2026, 08:23 AM UTC
Cleanzip319 entriescrc-verifiedpngphpcss
ZIP
0.81 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Theme header
Name
Foundation
Version
1.1.6
Version check
Match
package and product page both state 1.1.6
Author
Obox Themes
Author URI
http://oboxthemes.com
Project URI
http://oboxthemes.com/theme/foundation
Description
A one page theme for freelancers and small business owners who want to get the job done. Featuring 7 unique post types and a great user experience, there is no better theme for your business.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
e519d34649a0c074…
191.7 KB
CSS · package root
88f1ccd26a6ee785…
58.3 KB
PNG · images
7acaede43eaaa0b3…
47.1 KB
PHP · ocmx/theme-setup
bb286164dd355101…
36.8 KB
PO · lang
8d0b6abb9efbf4ee…
35.1 KB
PNG · images/layout/social-icons
b56ddb617cbe7a14…
34.5 KB
CSS · ocmx
a3cf64c2683fc97d…
26.2 KB
PNG · ocmx/images
692253fc5d9dd345…
25.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution13
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.