FolderDiff can be used to compare unzipped archives (e.g. Wordpress installations) with their original zip or tar archive (.zip, .tar, .tar.gz, .tar.bz2, .tar.xz) or a clean source folder.

As a result the found changes (added, deleted, moved and changed) are displayed.

$ folderdiff -h
usage: folderdiff [-h] [--prefix PREFIX] FILES FILES

folder compare tool

positional arguments:
  FILES            directory or archive to compare

options:
  -h, --help       show this help message and exit
  --prefix PREFIX  remove the prefix from the source and/or destination folder

folderdiff wordpress-6.0.3-de_AT.zip /var/www/ --prefix wordpress/
===================== Added ======================
+ webshell.php
==================== Modified ====================
* index.php

• Files that cannot be read (broken symlinks, missing permissions) are skipped with a warning on stderr instead of aborting the whole comparison.
• Symlinked directories are not followed, so their contents are not included in the comparison.
• Password-protected zip archives are not supported.
• Unlike zip archives, tar archives have no per-file checksum. A corrupted tar member may in rare cases be silently dropped from the comparison instead of being reported as an error.