This one in plugins from BdThemes. It is a different delivery mechanism. Plugin zips were not infected, instead the payload was delivered via an information page on site admin panel.