Curious. I know it's for free, but #WordPress plugin #JetpackProtect from #Automattic for detecting malware found zero hits on a website where simple grep and some knowledge shows clearly four infected files.
Take care of your websites...
https://wordpress.org/plugins/jetpack-protect/
Take care of your websites...
https://wordpress.org/plugins/jetpack-protect/