@Jeffro - Sounds interesting. An automated system to let developers know when their code is detected as malicious could be a really useful learning resource. You couldn't use it to auto-remove plugins from the repository as there is bound to be many false positives, but just alerting developers to the potential presence of bad code could be enough to solve many of the issues.