WordPress is actually a pretty safe content management system. It does get a bad name mainly due to people not upgrading their themes and plugins regularly but the core is pretty solid. There are things you can to harden WordPress and keep hackers at bay longer. Anti-Malware is one of many plugins you can install to find threats and malware on your server.
Anti-Malware helps you remove known threats automatically. You can download definitions of new threats as they are discovered. Still have vulnerable scripts on your website? This plugin has you covered. You can also stop brute force attacks against wp-login.php with this script. Users can customize scan settings and run scans when they need to.
The Anti-Malware Plugin is free at the time of this writing. It is an invaluable tool for WordPress webmasters who are worried about security threats.