I downloaded and ran a few plugins that were supposed to do threat scans and I was not that pleased. I wrote my own plugin that scans for the problems that I found in a blog that I just cleaned up. It works well, but it is not ready for prime time. I’d like to make it user friendly, perhaps with a way to edit the bad code, before I release it.