Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MMDB · admin/assets/data
…
9.19 MB
PHP · vendor/whichbrowser/parser/data
0424f0dbdfcf1c30…
1.59 MB
PHP · vendor/whichbrowser/parser/data
6c1cc78d5334f823…
1.51 MB
JS · admin/includes/statistics/static/js
d7f82e03f8e52838…
1.35 MB
SVG · admin/assets/img
242f6f776a5c713d…
1.18 MB
PO · languages
0cbf39984010fd8b…
277.9 KB
PO · languages
9633203bc20fb875…
264.1 KB
PHP · vendor/composer
8de858ff7b02069b…
251.5 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation7
curl_exec
Makes an outbound HTTP request
Remote request4
new Function()
Builds a function from a string
Code execution2
unserialize
Unsafe when given untrusted input
Deserialization1
exec / system
Runs an operating-system command
System command1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.