Hi Eli, needless to say your plugin is great.
I’ve been dealing with this issue for the past few weeks. Same scenario than other members (Wordfence not detecting it but Sucuri does).
Here’s MY EXPERIENCE AND SOLUTION so far:
Injected files on folder: wp-content / plugins
1o) monit.php / Ofgogoatan code was injected here. You must EDIT out those lines.
2o) admin_ips.txt / DELETE it, it’s not functional whatsoever. If you delete it but leave monit.php unchanged this file will be regenerated.
Just emailed you the code and I’ll repost if issue is reproduced in the coming days.
Thanks!
