Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CRT · vendor/stripe/stripe-php/data
ab15c8592742f46b…
247.6 KB
JSON · package root
c565be991cda5f04…
88.7 KB
PHP · includes/gateways
f1148f9e7bcaa40d…
16.2 KB
PHP · includes/gateways
aab3657fee3a68c9…
13.5 KB
PHP · vendor/composer
e4fc4d4487a4d766…
13.1 KB
JPG · assets/img
f8c782d1b2d486ef…
13.1 KB
PHP · vendor/stripe/stripe-php/lib/HttpClient
d6710f027309c6c9…
10.3 KB
PHP · vendor/stripe/stripe-php/tests
4888ac9884c35ba3…
10.1 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command3
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.