Hello @almend
I can assure you that absolutely 0 code exists within this plugin that is malicious. If you are aware of a security bug, please report it to https://github.com/3five/Custom-User-Profile-Photo
Additionally, from the way you describe this, it appears that you have or had a security issue with your host or some code within your theme or other plugins. Many times these things remain dormant until activated by the malicious party (I have been the victim of this before).
Please, in the meantime, don’t blame a plugin author until your are sure and have proof of a security bug or malicious code.
I can make two suggestions to you that will help you in determining your issues.
- Contact your host and ask them to review your installation for malware or viruses.
- Run your site through https://sucuri.net‘s free scanner.
I would also appreciate it if you would remove or postpone your negative and 1 star review until you can prove your accusation.