Malware or backdoor signature found in a file

What it is

The scan found code that matches known malware or webshell signatures — code built to give an attacker remote control of the site, hidden inside a file that otherwise looks normal.

How to fix it

Install the WordPress Plugin and run AI Repair — it removes the malicious code automatically, with a backup and automatic rollback if anything goes wrong. If you'd rather act right now without it, delete the file if you don't recognize it, then change every password on the site.