Custom code would not be detected by antivirus at all, also author can change bin flies when he decide to hide it...
I do not have a reason not to trust ppl that reported it, why would they lose a time for some useless shit coin which is pure scam, same as bridge he promote which just try to move your other BSC tokens (well i had none except old worthless bugaga tokens and they where not swapped and nothing moved as I had none other on that address)
Also bugaga deleted original token/coin post, I guess to hide what info some could find about him and to prepare next scam
btw thieving scam has deleted site, github and all