Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · public/editor-build/prod/js
f4a047172e84fa4e…
1.00 MB
JS · public/editor-build/prod/js
9fe35f03bb49406e…
897.1 KB
JS · public/editor-build/prod/js
f42b82b301b9c0ee…
795.5 KB
JS · public/editor-build/prod/js
1e250750647ce70e…
746.2 KB
JS · public/editor-build/prod/js
61cc5b3673d19f50…
705.5 KB
YAML · vendor/phpfui/constantcontact/yaml
b904e0f1ad91f0b8…
514.8 KB
JS · public/editor-build/prod/js
58039e66c6243d98…
347.4 KB
PHP · vendor/sendinblue/api-v3-sdk/lib/Api
bcc178fc856b504f…
276.9 KB
Code signals
8 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
assert
Can execute a string as code on old PHP
Code execution31
unserialize
Unsafe when given untrusted input
Deserialization12
curl_exec
Makes an outbound HTTP request
Remote request10
eval (JavaScript)
Executes a string as code
Code execution5
exec / system
Runs an operating-system command
System command5
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
eval
Executes a string as code
Code execution3
gzinflate
Decompresses a string in memory
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.