https://github.com/marcocesarato/PHP-Antimalware-Scanner/
This doesn't really remove malware, but it DOES scan all files for potentially malicious code, that makes system calls, uses eval in php, and many other things. Some are false positives, but in the command line option, it shows you each...