Every extension got this WP backdoor inside. I haven't checked the MainWP Plugin itself, because it's free. Example: Virus 'php_obfus_736.UNOFFICIAL' found in '/----------------------/----------------------/----------------------/wp-content/plugins/mainwp-branding-extension/class/class.plugin-modules.php'