I run a security plugin on my site and it’s flagging a file in ThirstyAffiliates Stats as Malware, should I be concerned?

The short answer is no.

Long answer: A number of security plugins incorrectly flag the allagents.xml file that resides in the Stats add-on as a potential malware threat.

This file is not malware and is part of how ThirstyAffiliates Stats filters out web crawlers and bots (sometimes even malicious ones) from skewing your click statistics.

The file itself contains a comprehensive list of web crawlers and bots that patrol the internet crawling across links. It is updated and published by http://user-agents.org/ and our plugin makes use of the XML list published on this site.