Windows Defender gives "detected Trojan:Win32/Wacatac.B!ml" for me with the ZIP-File but not in the extracted files. You should send the file to the microsoft defender portal as a false positive or reupload the zip with another compression setting.
Experienced the same thing (W10). Installing via the Itch app is a workaround that causes no Defender issues.