It’s unrelated to this plugin. Your site is hacked, and hacker mask his backdoor and stuff inside folder of this plugin in order to hide his work. It does that automatically again after you delete it.

I bet you have rogue administrator user. Try using Wordfence plugin to scan your site, use High settings.