Possible malware in controller.php

Hello,

is it possible that there is malware in the duplicator (free version) controller.php file?

When I create a backup using duplicator and try to save it to my PC my Avast Virus scanner aborts the download and tells me about a malware detection (trojan) in the controller.php file.

Is this a security issue the duplicator team knows about and is there a possibility to find out if the site or the backup is infected? Are there any solutions or measures to take now? Thanks so much for your help.

Regards Stephanie