Convert ClamAV into a checker of dependencies in compiled code. Since libraries and virus signatures aren’t too far apart. And it might result in discoveries of GPL violations.