SimplePie library is shipped with WordPress core (for a long time now). It is used by it to parse RSS feeds.
Your issue is unrelated to it, it’s very clearly a case of hacked site and malicious code being inserted.
Please note that recovery from hacks is considered not in scope in here. It’s not something that can be “answered”, you need competent professional to clean it up properly.