nulled plugins have php spambots hidden

http://nullednet.com/
https://www.virustotal.com/en/file/04185ec9c97efdd7251313ac12982bfc797a549bc5aa342f204344b8bd7ae72b/analysis/1394711632/
Detection ratio: 0 / 21

but when you upload the zip file downloaded from their site you get
https://www.virustotal.com/en/file/04185ec9c97efdd7251313ac12982bfc797a549bc5aa342f204344b8bd7ae72b/analysis/

DrWeb	PHP.Spambot.23	20140827
Fortinet	PHP/Alter.A!tr

woocommerce and their extremely costly plugins will be the next microsoft which is making the web unsafe . wordpress needs to change its policy of these guys making people buy costly plugins to perform simple tasks

if it is 3.1 mb definately check for virus on virus total
https://www.virustotal.com