Hey @ngothoai,
Thanks for the feedback! There are a few items in the FAQ that will provide an explanation for this issue.
? ? – A scanner says that a security issue/malware/threat was detected. Is this valid?
? ? – https://snapcreek.com/duplicator/docs/faqs-tech/#faq-trouble-070-q
Please note that 99.99% of all these virus scanner tools are false alarms. If the plugin did officially have a virus/security issue then it would be removed from the WordPress repository until we were able to apply a patch, which happens to almost all software at some point. We work very closely with other vendors to keep the software patched and safe for the community.
I hope you can re-consider your vote~
Cheers~