Just a FYI, the 7.0 does not work with the Bitcoin X (whatever the rest of it is) payment module on 1.7.7.4 anyways. The checkout page spits out an error message in the payments section.
the file which is supposed to be malicious is: supercheckout\controllers\front\supercheckout.php
I don't see any malicious code.
A false alarm? can someone look at it and tell me ... same issues on both files...