PHP Malware Injector Warning

Sucuri Security server-side scanner is showing a warning for the file

wp-content/plugins/branded-social-images/lib/class.og-image-plugin.php

with the reason given as php.malware.injector.075.

Do you folks have any insight as to why that might be happening? Is there a potential loophole in your code that could be putting websites at risk?