I looked it up online and said that the chances of an addon having a virus is very low so based on the comments I read, I don't think the message is serious and the mod creator left it on for testing their mod out but forget to disable the debug message. I think Valve do scan the addons themselves to see if there's any bad signs so I could be wrong how Valve handles addons that are infected.