[0] The types of transactions that are less likely to catch false positives would probably be those that have "superfluous scriptSig operations". For other classes of malleability, it would be more difficult to tell whether a given transaction was the result of a malleability attack or if it was just a transaction produced by an alternative client.
Malleability is a property-noun (also not a verb)[2]
These words do not have "past-tenses"
[1] http://www.oxforddictionaries.com/us/definition/american_eng...
Malleate \Mal"le*ate\, v. t. [imp. & p. p. {Malleated}; p. pr. & vb. n. {Malleating}.] [L. malleatus hammered, fr. malleus a hammer. See {Mall}, v. t.] To hammer; to beat into a plate or leaf. [1913 Webster]
"Malleability" is the property of transactions that aspects of their serialization format can be changed without invalidating them. Actually changing transactions is called "mutation", the past tense of which is "mutated".