I'm currently making an Anti-Virus Plugin and one of the features of the plugin is scanning for backdoors such as the following:

--- 'getfenv', --- 'require', --- 'InsertService = game:GetService("InsertService")', --- 'InsertService'

Here is the back door checking code:

local Keyword_Database = require(script.Keyword_Database) --ModuleScript
local keywords = Keyword_Database

function returnSauce(child)
    print(child.Source)
    return(child.Source)
    
end

function infectedSource(source, scantype)
    for i,v in pairs(scantype) do
        if string.find(source, v:lower()) then
            return true
        else
            return false
        end
    end
end

if infectedSource(returnSauce(testScript):lower(), keywords) then

--does the quarantine stuff

end

I obviously didn't put the scan buttons and stuff and didn't put the function that calls the function to check the scripts (line 20-24) but it should be enough info

Plugin Link: https://www.roblox.com/library/5602079083/Yattagu-Anti-Virus-Plugin

is obfuscated so not much use unless you wanna use it