A live WordPress Theme editor that works without modifying any of your theme files. Very low performance footprint: only generates and adds a single static CSS file to your site.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · dist
…
2.04 MB
CSS · dist
ecca6698db3c4f8a…
395.4 KB
JS · dist
2822ca9f0cd195d3…
131.4 KB
SVG · dist/fonts
882b917f152258ce…
50.5 KB
PHP · package root
8e31673c0561717a…
36.9 KB
PHP · plugin-update-checker/vendor
ee52d7d0bafc76b4…
36.7 KB
PHP · plugin-update-checker/vendor
b6538399a732ea15…
36.4 KB
PHP · plugin-update-checker/Puc/v4p11
79280a26f1073f26…
30.9 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
gzinflate
Decompresses a string in memory
Obfuscation2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.