How to mark suspicious code?