The cds-feature-attachment supports using the Malware Scanner Service for scanning attachment content, but it's not exposed as independent service to CAP Java. There might be use cases where a stakeholder want's to leverage the Malware Scanner Service without the Attachment Service.
It's not possible to inject an instance of a MalwareScannerService into a custom handler. Please add a MalwareScannerService to service catalog that can be injected into custom code and used without the AttachmentService.
cc: @agoerler @BraunMatthias
See https://github.wdf.sap.corp/cds-java/home/issues/1500