SSH Find base64
find . -name "*.php" -exec grep "base64" '{}' \; -print &> b64-detections.txt
find . -name "*.php" -exec grep "eval" '{}' \; -print &> eval-detections.txt
Find php files in the uploads folder. Run command rom wp-content directory.
find uploads -name "*.php" -print