Hi all,

Tried installing some WordPress sites and all looked to be ok. CPFence emailed me this morning to warn of possible malware. It isn't malware as these are fresh installs, not touched, and proven by deleting installs and reinstalling. I've downloaded WP7 from Wordpress' main site and the files are full filenames. Softaculous installs WP7 to my old servers (what i'm moving away from) fine with no errors either.

It doesn't matter either if you install WP to public_html/ or a sub folder.

Doesn't seem to be causing any immediate issues, but can't say if it may in future? Would one of the team be able to have a look and see if it's something Enhance is causing, or maybe something as simple as a corrupt file from the source repos.

Attached is a pic of 1 of the folders in Enhance showing the file, and also the src from WP site. The log file (for reference so you're not hunting all the truncated filenames) below.

![https://i.ibb.co/JjG8zDSV/Screenshot-2026-07-08-090239.png](https://)
![https://i.ibb.co/DHMvcQ9N/Screenshot-2026-07-08-090527.png](https://)

`==== START: Issues Detected for Site (/var/www/xxxxxxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html, Owner: xxxxxxxx) ====

Auto-quarantine is disabled. Please review and delete files below if found to be infected. Run 'cpfence --enable-auto-file-action' to enable Auto-quarantine.
Suspicious file detected!
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/SpeechGeneration/Contracts/SpeechGeneration
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/VideoGeneration/Contracts/VideoGenerationOp
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/VideoGeneration/Contracts/VideoGenerationMo
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationMode
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationOper
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/ImageGeneration/Contracts/ImageGenerationOp
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/ImageGeneration/Contracts/ImageGenerationMo
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion/Contracts/TextToSpee
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/OpenAiCompatibleImplementation/AbstractOpenAiCompa
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Http/Contracts/WithRequestAuthenticationInterface.
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/AbstractApiBasedModelMetada
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ListModelsApiBasedProviderA
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts/ApiBasedModelInte
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/GenerateTextApiBasedProvide
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/src/Providers/Contracts/ProviderWithOperationsHandlerInterface.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Strategy/CommonPsr17ClassesStrategy.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/NoCandidateFoundException.p
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/DiscoveryFailedException.ph
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/ClassInstantiationFailedExc
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/StrategyUnavailableExceptio
sudo rm -f /var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-includes/php-ai-client/third-party/Http/Discovery/Exception/PuliUnavailableException.ph

==== END: Issues Detected for Site (/var/www/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html, Owner: xxxxxxxx) ====`

Cheers 😊