Search for base64_decode & hex strings in WordPress files

To find potential malware files:

grep -r base64_decode /home/user/public_html/*

grep -rP "(?:\\\\x[A-F0-9]{2}){5}" /home/user/public_html/*