What a coincidence, happened here too. I work in IT and know for a fact that these things may happen. But as a developer it is very irresponsible on your part to answer and just say “these things happen” and not even take a look at your own files. I will make sure my client does not install any more suspicious plugins without the proper research in the future, but at the same time YOU as the developer should take a look at your own code.