I do not say that there is any malicious in phplist files. But I found that many of phplist files were altered so I deleted them and installed fresh phplist.
I consider phplist in this case rather as victim. But, let me monitor situation and let you know if there are any news.
Thanks