Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · templates/wc-welcome-1
2c3d3c20fc4c097b…
137.6 KB
PHP · package root
8aad101ef7430ee8…
25.9 KB
PHP · admin
b3d68eda03bc2ffe…
23.7 KB
PHP · themes/automated/woocommerce
7c7f1b634dd20ba5…
12.8 KB
PHP · blocks/woocommerce
c1e63ad35551c098…
12.3 KB
TXT · package root
2130369af3e6e589…
8.3 KB
PHP · admin
5030f9ebc9d55647…
6.9 KB
PNG · blocks/woocommerce
af1ba093318eeae1…
6.7 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.