probably a false positive. the source code is available on github for anyone to check that it's not an actual malware.
