Hi,
Sure, by changing the keyword logic from the default AND to OR, it will match either of the keywords: https://i.imgur.com/4kFAyZu.png
Can you please tell me all the specifics about the malware? It would be very important for me to know which code exactly is triggering the malware detector. Can you please also tell which malware detector is it (plugin or service)? If there are no details, can you please ask for them? It could be very important.
In 99% of the cases these are false positives, as the plugin is quality checked on multiple channels, but I want to be completely sure.