I have installed this plug in on a few sites now
and if installed on a live site it seemed to attract hackers, who thankfully never actually got in due to the fact that the plug in is rock solid, or so it would seem.
so to be safe, install locally and upload to avoid detection.
I have no idea how people 'find' you but they certainly seemed to in my case, and it happened too often to be coincidence I think.
anyway it works great, use it!