Trustify – WordPress Fake Social Evidence · Sep 09, 2026, 03:35 AM UTC
Cleanzip50 entriescrc-verifiedphppngjavascript
ZIP
0.09 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
Trustify
Version
2.2
Version check
Mismatch
package contains 2.2, product page advertises 2.3
Author
Kaththemes
Author URI
http://kaththemes.com
Project URI
http://demo.kaththemes.com/plugins/trustify
Description
Help to create fake sales or real time WooCommerce sales notification as popup which will display in a certain time interval on the screen in all pages or selected pages from backend.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · admin
69a673164a06e1e0…
53.1 KB
CSS · admin/css
9f3a1cedeba4a796…
30.0 KB
CSS · admin/css
80aa5497ff31b2c0…
23.3 KB
CSS · admin/css
a9be2791b6b8b00b…
11.4 KB
PHP · public
978dc7d2fd022026…
10.5 KB
POT · languages
1c16ea3fafc436cd…
8.9 KB
PHP · includes
d07a26b0b1b5f815…
7.7 KB
JS · public/js
48827bfcf35738b8…
7.6 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.