False Positive on WordPress.org?

[hpguru]

Avast 4/5 some problem.

Please check.

http://wordpress.org/support/topic/271799

[DavidR]

The problem is some idiot posted the complete script code on the page instead of using an image and to make it worse even posts a direct active link to the hacked page.

Unfortunately avast treats the text based script code the same as if it were in the html code as that is what it is looking at.

[jsejtko]

Hello,

It's not a false positive -> the site contains malicious script (inactive) but in same form as it is distributed - in text form. Please tell the owner/creator of the topic to use images instead of cut&paste to show malware pieces.

Regards

[hpguru]

Thank you. I reply to this topic.

[DavidR]

Thanks, hopefully they will heed your suggestion/advice when posting exploit/malicious script code, use an image or break the code in a way it can't be taken for the real threat.