Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · package root
62b1eb1b40181241…
146.8 KB
PHP · package root
400a78326f3db5b4…
10.3 KB
GIF · assets/images
95e2cae73607bd07…
8.3 KB
GIF · assets/images/src
95e2cae73607bd07…
8.3 KB
PHP · includes
8489340cb8d27abe…
7.0 KB
PHP · includes
1d55b7076a7c6862…
6.7 KB
PHP · includes/views
8216dc18a82b2fcb…
5.8 KB
PHP · includes
c29b608e243288f5…
4.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.