Hidden files and directories added to WordPress

[marcusconnor]

My spam scanner alerted me of newly added hidden files and directories added to WordPress live site. Please do not include hidden files or directories in live sites. This is very fishy activity.

php-toolkit/DataLiberation/vendor-patched/rowbot/idna/.github
php-toolkit/DataLiberation/vendor-patched/rowbot/idna/.gitattributes
php-toolkit/DataLiberation/vendor-patched/rowbot/idna/.phpcs.xml
php-toolkit/DataLiberation/vendor-patched/rowbot/punycode/.github
php-toolkit/DataLiberation/vendor-patched/rowbot/punycode/.gitattributes
php-toolkit/DataLiberation/vendor-patched/rowbot/punycode/.phpcs.xml
php-toolkit/DataLiberation/vendor-patched/rowbot/url/.github
php-toolkit/DataLiberation/vendor-patched/rowbot/url/.phpcs.xml

[adamziel]

Thank you for reporting @marcusconnor! I've started #194 to remove those. Out of curiosity, which scanner do you use? And, also, how are you using PHP toolkit?