Wow, startling headline, but not totally accurate. The buoy-data.php script you attached (and the distributed one) are both malware-free.
It appears that what the Linux Malware Detect v1.4.1 is griping about is the use of include("buoy-data.php") and not even the HTTP version of the include (which would be viewed as suspicious if it is on a different domain).
You didn't include the contents of the page that is loading buoy-data.php, so it's hard to tell just why the Linux Malware Detect software is griping about a perfectly ordinary PHP method of invoking a script. If you're using something like:
In the <head></head> part of the including page, put:
<?php
$doPrintBUOY = false;
include("buoy-data.php");
print $BUOY_CSS;
?>
in the <body></body> part of the including page, put:
<?php print $BUOY_MAP; ?>
<?php print $BUOY_TABLE ?>
If you need to center the map and table on the page, don't use <center></center> or <div align="center></div> as it will cause the map display to offset from the background map. Instead use in the <body></body> part:
<table width="99%">
<tr><td align="center">
<table width="100%">
<tr>
<td align="center">
<?php print $BUOY_MAP; ?>
</td>
</tr>
<tr>
<td align="left">
<?php print $BUOY_TABLE ?>
</td>
</tr>
</table>
</td></tr>
</table>
to load your buoy-data.php script in your page, there should be no false-positive indications from the Linux Malware Detect software.
Best regards,
Ken
