anjanesh A popular tool that you can use is located here: https://github.com/scr34m/php-malware-scanner
You can "git clone" it to a shell user's home directory, and then scan an app of your choice, like this:
# git clone
git clone https://github.com/scr34m/php-malware-scanner.git
# run scan
php ~/php-malware-scanner/scan -k -d ~/apps/<app_name>
Keep in mind that no automated malware scanner can be considered 100% accurate, so the scan results may contain false positives and there may be some infected/malware files that the scanner is unable to detect.