Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · inc
09e3f4e3975e6372…
19.9 KB
PHP · package root
8a2a7a8c422b36ce…
16.7 KB
PHP · inc
0bc959d27256a786…
6.5 KB
PNG · images
20eb7779e6854515…
3.6 KB
CSS · css
e2d082dd18ca5b5a…
3.2 KB
GIF · images
f6ecff617ec2ba7f…
1.8 KB
JS · js
2e3937415aefbce1…
1.8 KB
TXT · package root
ceea77ed3a3373ee…
1.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization8
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.