Netflix phishing emails being sent

Hello, I had a fresh install of WordPress and installed the Newspaper theme and within several days began receiving emails from my hosting company’s abuse department. At first I thought the emails from their abuse department was a hoax but after reaching out to my hosting company I discovered that it was not in fact a hoax, but a legitimate request for me to remove the files in question due to Netflix having reported phishing emails coming from my server.

By the time I saw their emails it had been several days and I didn’t want to risk having my server shut down by taking the time to figure out what was causing the problem, so I just emptied the entire root directory for that domain in order to not have my other domains on the same server affected.

I don’t know if it was directly from your script or from an ancillary script downloaded from your theme.

Here is the basic information that my hosting provider sent:

Attachment: none
Category: fraud
Date: 2020-09-16T22:48:09+00:00
Domain: stoners.org
Port: 443
Report-ID: takedown-response+11643142@netcraft.com
Report-Type: phishing
Reported-From: takedown@netcraft.com
Schema-URL: http://www.xarf.org/schema/fraud_0.1.4.json
Service: https
Source: https://www.stoners.org/wp-content/plugins/jetpack/vendor/en/login?netflix_id=ba7e0a454d3c349c86610bfd8&country=Poland&iso=PL
Source-Type: uri
User-Agent: Netcraft Takedown

I’m not sure if this was reported previously to you guys, but I was shocked when I saw the emails. Can you provide any insight as to why this would happen? I don’t want to install the theme again in case the same issue arises and my hosting company shuts me down. I’d prefer a refund if possible.

Thank you,