Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PO · language
410c9090da595b7f…
299.0 KB
PO · language
39c144fb829a1339…
297.4 KB
PO · language
af83d75f24f17467…
296.2 KB
PO · language
86d9200531fc8dd3…
291.5 KB
POT · language
4cea5b4e94d0c957…
291.2 KB
PO · language
744e945630af167e…
288.9 KB
CSS · assets/admin
38a5b00243ed1555…
79.5 KB
PHP · app/Modules/Messaging/Http/Controllers
fe9bc2fa0c473979…
68.3 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.