Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
a455a97ca81542fb…
15.6 KB
PHP · package root
c01219f82daed1cf…
6.1 KB
POT · i18n
cec500e7afb4fc79…
2.8 KB
JS · package root
1e408a0994346d5c…
1.8 KB
PHP · package root
3205445a213b49e1…
0.9 KB
JS · package root
ba15bc1f31310edc…
0.8 KB
XML · package root
92acf669f243d8cc…
0.8 KB
JS · package root
f304bd7080c58408…
0.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.