hiring devs for WP work

I hired a dev in india to do some work on my WP site.

Wasnt a pleasant experience. but ok the work was done partially and we parted after partial payment.

Ive since removed her user account on WP.

But today I logged in to my site via ftp and saw a newly created file called wp-new-login.php

Is this file a normal file on WP?

I opened the file and saw this code in it:


From what I can deduce if someone called this script from outside it would basically delete the entire contents of my wp-content folder right?

So is it right to assume this dev has placed this file here for some harmfull reason??

Seems like a bad guy had access to your ftp. Start with securing your credentials and removing everything else.