It is a false flag; the file is safe and the game is open source- you can go through the code yourself if you want to.
The devlog post regarding antivirus issues has instructions for bypassing this.