Atm it finds the following exploits
-Zerg Mineralhack
-Nuke anywhere
-Multicommand
-Automine at the start of the game
I want to add detection for the rally-exploit but need a replay where it is used for that.

Multicommand
It now checks for a command alternating with select. If this happens at least 3 times(corresponds to 3 control groups being commanded) it displays a message. I’m not sure if there are occasionally false positives.

Automine
Automine consists of fours selects alternating with gaters/moves to different targets in the first possible frame(5 on bnet, 2 on LAN). Detecting these is similar to multicommand, except moves with different target are also considered here.

Nuke anywhere
Whenever an opponent selects a nuke you get a message. As selecting a nuke is required for nuke anywhere exploit and not possible without a hack it should work reliably.

Zerg mineralhack
It shows a message if a CancelTrain command is given to a zerg larva. There might be other variants of this hack (related to muta->guard/devourer and hyd->lurker), so if you find a replay where a minhack is not detected post it here.

Set enemy Rallypoint
AdvLoader 2.0 allowed observers to change the rallypoints of enemy buildings. For 1.15.2 there are hacks which allow the same for every player/observer. Unfortunalty I have found no replay of this exploit, so detection is still missing for that exploit.

If you have a replay where the opponent uses an exploit which is not detected by this detector please post a replay here. Rigged UMS maps do not count as an exploit.

Download and usage
Now it is a plugin. Copy it to your Launcher folder and check it in the plugin list.
http://winner.cspsx.de/Starcraft/Tool/HackDetector.zip

As usual blizzard might ban you for using this. The chance for that is a bit higher that with chaosplugin, and about the same as LatencyChanger or any of the AdvLoader plugins.