PHP malwares hiding as CSS files

[ebourg]

The scanner fails to detect PHP malwares hiding as CSS files. The filename follows the pattern: \.[0123456789abcdef]{8}\.(css|ccss), for example .dd8cff6b.css.

Once the extension is changed to .php the file is properly detected by the scanner.

[ebourg]

I tried the --scan-all option but the scanner crashed. Would it be possible to add .css files and hidden files to the set of files scanned by default?