switch.php malware notification | WordPress.org

I can confirm that our customizer code creates those files as part of our customizer support. It’s contents should look like this:

<?php
   class Redux_Customizer_Control_switch extends Redux_Customizer_Control {
     public $type = "redux-switch";
   }

I’ve never heard of those files as being flagged as malware. If you inspect the contents of that file and it’s as indicated above, then it’s definitely a false flag and you can ignore it (or report it to the company that offers this service and let them know it’s a false flag).

Good luck!