Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · vendor/freemius/includes
f3cbeae6a457154b…
993.5 KB
JS · assets/js
e1dcf688e50534f1…
552.0 KB
JS · assets/js
0cbc713fd115cfd4…
495.4 KB
PO · languages
5fe65adbab77f839…
393.8 KB
PO · languages
3cd393058d423cf3…
376.1 KB
PHP · includes
bab29a799fa9b3ca…
357.5 KB
PO · languages
7cde6e4aa8fe5057…
319.5 KB
PO · languages
b99f82cae3985554…
316.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.