Hack target?

Seems like a hacker got into a client’s site via this plugin and renamed it wp-bad-plugin. This plugin hasn’t been updated in 2 years, that’s probably why security flaws exist.

https://ww.wp.xz.cn/plugins/wp-easy-embed/