Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
7844ed53c41f7bc0…
167.2 KB
CSS · package root
0e0da56b2f6bb883…
88.1 KB
PHP · ocmx/theme-setup
695158d9eee02ac6…
67.4 KB
PNG · images/layout
66e41fcce900c1a5…
55.6 KB
PNG · images
7acaede43eaaa0b3…
47.1 KB
PO · lang
8d0b6abb9efbf4ee…
35.1 KB
PNG · images/layout/social-icons
b56ddb617cbe7a14…
34.5 KB
PHP · ocmx/theme-setup
d3314fa6e7054540…
28.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
create_function
Removed in PHP 8; builds a function from a string
Code execution15
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.