Almost definitely a false positive. Dude's not gonna nuke his passion project to upload malware on a platform attached to his banking information, and is likely competent enough not to do so accidentally.
