Quttera ThreatSign – Web Malware Scanner for WordPress

{
    "slug": "quttera-web-malware-scanner",
    "finding_count": 7,
    "findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "external_scan_page.php",
            "line": 16,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrSettings.php",
            "line": 1148,
            "snippet": "$value = base64_decode($encoded_value, true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrAjaxHandler.php",
            "line": 857,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "qtrPatternsDb.php",
            "line": 112,
            "snippet": "$step1  = base64_decode($body);",
            "confidence": "medium"
        },
        {
            "pattern": "hex_string_long",
            "kind": "builtin",
            "file": "qtrMimetype.php",
            "line": 37,
            "snippet": "array(\"helpfile\", \"\\x49\\x6e\\x6e\\x6f\\x20\\x53\\x65\\x74\\x75\\x70\\x20\\x55\\x6e\\x69\\x6e\\x73\\x74\\x61\\x6c\\x6c\\x20\\x4c\\x6f\\x67\", 0, \".chm\")",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "dashboard.php",
            "line": 151,
            "snippet": "$cache_json = base64_decode($cache_encoded);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "qtrExternalScanReport.php",
            "line": 292,
            "snippet": "str_contains($s, 'eval(') ||",
            "confidence": "medium"
        }
    ],
    "resolved_sha": "9720fd5631ce311f068b3ef9c61d7a9854b704fa"
}