Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
01a4ba1fd72a744f…
115.1 KB
PO · languages
6d8f013c2e690585…
67.1 KB
PHP · modules/gadsense/includes
72b0804fab5d319d…
58.2 KB
JS · admin/assets/js
0be04f32e5193881…
52.7 KB
PHP · classes
343510e8accc1f7c…
46.8 KB
PHP · classes
581b5148d35267c5…
43.5 KB
CSS · admin/assets/css
0c50539acac74c4d…
41.8 KB
FILE · lib/yoast/i18n-module
12ac5047f2af0522…
34.3 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation2
unserialize
Unsafe when given untrusted input
Deserialization2
eval
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.