Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · admin
b907d05d6bbbf57f…
8.0 KB
PHP · classes
abbe3b1e07604cec…
5.2 KB
PHP · package root
df0ce5863db55019…
3.7 KB
TXT · package root
8cdfe7c44263f48b…
1.6 KB
INC · package root
50dca2839ae73197…
1.2 KB
PHP · admin
d4812d78ecb8ff56…
1.0 KB
PHP · package root
af8126fbd932b2c6…
0.9 KB
PHP · admin
d9ab7de845a3c296…
0.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.