Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js/admin
17f2c4a318404a1d…
150.7 KB
POT · languages
64360934c855753a…
109.2 KB
JS · assets/js/admin
2272880396a9e24d…
69.0 KB
JS · assets/dist/admin
48899e98d45e7bd9…
67.1 KB
JS · assets/dist/admin
6d02c98c44bc8dcc…
49.7 KB
JS · assets/dist/frontend
57ba8050a526d2d1…
43.7 KB
PHP · includes
6ad832090f75ca57…
40.8 KB
PHP · includes/rest-api
47363dfdc2725ee3…
40.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.