Vaultpress flagging BPS file

I just got an email this morning from Vault Press with the following info.

Suspicious Code

Our security scanners detected the following possible security issues. We recommend that you review the affected files.

PHP.Shell.Base64.Indirect

VaultPress has detected a web-based “shell” a very dangerous backdoor which may allow unauthorized access to your server. A shell may be used to infect your server with a virus, or add malware to your site.

plugins/bulletproof-security/includes/mscan-ajax-functions.php

Any idea if this is a legitimate concern or something I need to just ignore? I’ve contacted Vault Press about it as well to see if it’s a false positive.

The page I need help with: [log in to see the link]