Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · package root
21571cf12bc20c15…
40.8 KB
TXT · vendor/arcturial/clickatell
b3d1eae7f524fc9d…
35.0 KB
PHP · vendor/twilio/sdk/tests
41844a901fc7cb74…
30.5 KB
PHP · vendor/twilio/sdk/Services
979d71ffdc9c80bc…
27.0 KB
RST · vendor/twilio/sdk/docs/api
0b90e5ae4fb0ca5d…
26.4 KB
PHP · package root
2ae6e0949047c99b…
21.1 KB
RST · vendor/twilio/sdk/docs/api
ac38a7eeb7ceae27…
20.6 KB
PHP · vendor/netresearch/jsonmapper/tests
faaab541227462ba…
19.9 KB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
file_get_contents(url)
Fetches a remote URL
Remote request2
create_function
Removed in PHP 8; builds a function from a string
Code execution2
unserialize
Unsafe when given untrusted input
Deserialization1
eval
Executes a string as code
Code execution1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.