I remember cleaning a couple of client's wordpress sites that were infected with this hack some years ago, during 2015 if I remember correctly, it was hard work. It seems many sites were infected with this kind of spam at the time.