'Laravel unknown_html_RFI_php Malware

I received an email from hosting informing me about malware on one of my server accounts. This is part of the text of the email. Please do not say that this question cannot be answered :) |HTML:Script-inf [Susp]

explanation of virusnames: unknown_html_RFI_php not yet detected by scanners as RFI, but pure php code for injection unknown_html_RFI_perl not yet detected by scanners as RFI, but pure perl code for injection unknown_html_RFI_eval not yet detected by scanners as RFI, but suspect javascript obfuscationg evals unknown_html_RFI not yet detected by scanners as RFI, but trapped by our honeypots as remote-code-injection unknown_html not yet detected by scanners as RFI, but suspious, may be in rare case false positive ...javascript.insert Please pay attention for script code after unknown_exe not yet detected by scanners as malware, but high risk!

Could this be a snippet of code? I use this piece of code to send a text message to the user. This code calls a URL from .env

   class User extends Authenticatable
{
    public function sendPayamak($mobile, $code)
    {
        $url = env("KhadamatiUrl", null);
        $data = array('bodyId' => 72350, 'to' => $mobile, 'args' => [$code]);
        $data_string = json_encode($data);
        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
        curl_setopt($ch, CURLOPT_POSTFIELDS, $data_string);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt(
            $ch,
            CURLOPT_HTTPHEADER,
            array(
                'Content-Type: application/json',
                'Content-Length: ' . strlen($data_string)
            )
        );
        $result = curl_exec($ch);
        curl_close($ch);
    }
}


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source