Is the free Jetpack Protect actually scan for malware or only vulnerabilities?

Hi,

the description says, it is scanning for malware. There is a big difference between vulnerabilities and malware. I’m looking for a solution, that actually scans the files and the database for malware also.

So my question: is the free Jetpack Protect actually scan for malware in the database and on the server? Not vulnerabilities in themes, plugins and core, but malware?

Thank you!