Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/admin
44fa25f348bab0d7…
16.5 KB
PHP · includes
d8a9a36a9e39bd44…
16.2 KB
PHP · includes/admin
9f9508328fa310af…
10.3 KB
PHP · includes
f9bef8a6c9854c04…
10.0 KB
PHP · includes/admin
1051fb245885fec9…
9.9 KB
PHP · includes
74563766467d48f8…
9.4 KB
CSS · assets
4f7cb7cc0965ee95…
8.5 KB
JS · assets
8d674ad6f5600236…
7.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization3
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.