No, at least not on the desktop machines.

On servers, it picked up a few exploitable (but uninstalled) packages from our Debian mirror, and a few EICAR files. So, no actual threat averted.

We definitely have... but they were windows viruses / malware. Still, glad to see it was flagging something.