I very much doubt it's malware. This is from the same developer as DivestOS, Mull, Mulch, etc.

It's offline except when you update databases. Nothing in firewall logs except when you update. App Manager scans look clean.

It is developed by the DivestOS Dev. It is safe.

Don’t know much about it, but it appears to be an Android front end for ClamAV.

Unless there’s a team adding ClamAV signatures for APKs, it’s not going to be all that useful to actually protect an Android environment.

[edit] ah; looks like it’s bootstrapping itself somewhat with ESET APK signatures.

I wouldn’t use it in its current state, but it shows some promise. I’d wait for the proposed feature list to get consumed a bit and for someone reputable to audit it.

I started using it recently. Not much to comment on—the scans came back negative and that's it. My phone shows no signs of malware I've noticed so nothing to indicate they're false negatives.

I've used it, it works fine..