I very much doubt it’s malware. This is from the same developer as DivestOS, Mull, Mulch, etc.

It’s offline except when you update databases. Nothing in firewall logs except when you update. App Manager scans look clean.

I’ve used it, it works fine…

I started using it recently. Not much to comment on—the scans came back negative and that’s it. My phone shows no signs of malware I’ve noticed so nothing to indicate they’re false negatives.