itch.io

I've checked my files and system and find no issue. I would guess yours has likely detected a false positive. 

Depending on how the game was exported, Godot games can sometimes be considered a trojan due to its "Embed PCK" feature. Same issue reported on Godot's GitHub.

Unless the dev pays for a code signing certificate and signs every release, this'll happen at random. This trojan is a false positive.