Getting email alerts from deleted plugins

Hi,

I am getting e-mail alerts of plugins which contain vulnerabilities of 1 or 2 plugins which are not in my WP install (also not anymore as inactive plugins), not in the WPScan plugin “Settings” nor in the “Report” in the WP dashboard.

The only reference is in the alert e-mail. Any idea what’s going on? Are the e-mail alerts subject to any caching?

P.s. I hope this plugin stays alive and keeps rocking, I will never install Jetpack!