Got malware in plugin and card details stolen after payment

Right after purchase from asanaplugins (using paddle as gateway) I got fraudulent transactions coming in (paddle denied involvement as they are only a gateway)…
I ignored all the signs and installed the plugin in my site…proved working okay but got a backdoor installed on my site, this being the only plugin installed since that time. Will change this review if things get sorted, but overall a very bad experience