wp_pushup

If you find a plugin on your site that you’re sure none of your users who have “install_plugins” capability would have installed (usually only admins), then it indicates your site was likely hacked. If this is the case, please work through the steps outlined in FAQ My Site was Hacked. The first step is stay calm. These things happen. While immediate attention is called for, there’s no reason to panic. Best of luck.