Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
c9174a12428777cc…
31.9 KB
PHP · package root
87210752c50bcfd7…
13.8 KB
PHP · package root
308a48328eb6f206…
6.1 KB
TXT · package root
d3028cd90c526ffc…
4.4 KB
PHP · package root
8161259dd122ebf9…
4.1 KB
PHP · package root
3c4fbd11c6768568…
3.4 KB
JS · assets/js
bbbccf689854c8c0…
1.2 KB
JS · assets/js
2ee0486c9f5dd457…
0.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization15
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.