Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
8a00eb2b92565e24…
8.3 KB
PHP · admin
e128c6051a1463d6…
8.0 KB
PHP · classes
53d6ac00411131ed…
5.2 KB
TXT · package root
f218feca029e5fa1…
1.8 KB
PHP · admin
d4812d78ecb8ff56…
1.0 KB
PHP · package root
46c6036c749ed7aa…
0.9 KB
PHP · admin
d9ab7de845a3c296…
0.5 KB
PHP · package root
76304178a553b2c0…
0.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.