The review below me by "151kmh" is hilarious.
Let's start off with the supposed backdoor which allows the creator to execute OP commands in the console... um, the console is already considered OP. How would a plugin allow a dev access to a console?!?!?!
Next, I checked out the source code provided on GitHub, nothing there. I decompiled the plugin... it's 1 class with 5 event listeners. Absolutely NOTHING to do with a backdoor, nothing to do with console, nothing to do with commands.
So yeah "151kmh", if you are going to claim backdoor, maybe learn how the server and plugins work before you make such a stupid statement/claim.
Warning, this plugin is a rat. I checked the source code, and it has a backdoor which allows the creator of the plugin to execute OP commands in the console of the server