The pluging says it: https://wordpress.org/support/topic/remove-this-plugin-immediately/
Sucuri says it: https://blog.sucuri.net/2019/04/attacks-on-closed-wordpress-plugins.html
This guy says it: https://wordpress.org/support/topic/malware-hack-on-your-website-fix-it-related-posts/
You want ant? ‘Cause that’s how you get Ants…