What specifically in the code is malware?
There's only one or two users working on it because it was created from a relatively small bounty (very common for most bounties) and was largely under the radar until maybe a week ago...anyone can read the code and make pull requests and contribute any time they want. Hopefully more attention brings more users willing to help work on it.