The same was happening to me for a couple of hours earlier in the day, and only exclusively with the downloadable version of my game, the zip file before uploading it was fine and windows defender wouldn't flag it, but if it was downloaded from itch, it would get flagged as the exact same trojan you described.
It no longer does that, I changed my password, 2fa and all that jazz just in case the download was getting hijacked somehow, no idea how something like that can happen, but its solved now. If is still happening to you, take down the download, and change your password and stuff.