That’s not malware, it’s part of the redux framework which is used for the Theme Options. You can ignore that crazy warning.
The details are here.
Speaking from personal experience, I do not recommend using this plugin.
It adds a lot of codes to your .htaccess file and it does not remove it when you deactivate your plugin. These added codes sometimes cause certain theme or plugin features to malfunction.
If you need protection from hacks and malware, it’s better for you to use a website firewall, such as https://sucuri.net/website-firewall/