I was directing that towards allaerd (plugin author)
You mentioned capitals in names; does that apply to URLs as well?
Just got this one marked as malware as well: ../wp-content/backups/my_website-backup-plugins.sql.8c9e6d3a9256f1a15da0b56a848f4f51150-wpb2d-secret
I changed the alphanumeric string a little, for security purposes.