caveats: apps with malware

doc/cask_language_reference/stanzas/caveats.md

@@ -38,6 +38,7 @@ The following methods may be called to generate standard warning messages:
 | `files_in_usr_local`              | the Cask installs files to `/usr/local`, which may confuse Homebrew
 | `discontinued`                    | all software development has been officially discontinued upstream
 | `free_license(web_page)`          | users may get an official license to use the software at `web_page`
+| `malware(radar_number)`           | app has been reported to bundle malware. See [the FAQ](https://github.com/caskroom/homebrew-cask/blob/master/doc/faq/apps_with_malware.md) for the necessary steps.
 
 Example:
 

lib/hbc/caveats.rb

@@ -133,6 +133,22 @@ class Hbc::CaveatsDSL
     EOS
   end
 
+  def malware(radar_number)
+    puts <<-EOS.undent
+    #{@cask} has been reported to bundle malware. Like with any app, use at your own risk.
+
+    A report has been made to Apple about this app. Their certificate will hopefully be revoked.
+    See the public report at
+      https://openradar.appspot.com/#{radar_number}
+
+    If this report is accurate, please duplicate it at
+      https://bugreport.apple.com/
+    If this report is a mistake, please let us know by opening an issue at
+      https://github.com/caskroom/homebrew-cask/issues/new
+
+    EOS
+  end
+
   def method_missing(method, *args)
     Hbc::Utils.method_missing_message(method, @cask.to_s, 'caveats')
     return nil