Those are trash-tier anti virus, you need to pay them to get your stuff white listed, otherwise it always says is infected. Really infected stuff triggers a lot of AV, not only a few.
Thanks for flagging it! As the previous comment mentions, these are known false positives — 2 out of 70 antivirus engines flag it, both using heuristic/ML detection (not actual signature matches). All major antivirus software (Windows Defender, Kaspersky, Avast, Bitdefender) report it as completely clean.
This is a common issue with Godot 4 games — the engine packages everything into a single executable which looks suspicious to aggressive heuristic scanners. You can verify on VirusTotal yourself: only Gridinsoft and Trapmine flag it, both known for false positives on indie games.
I've added a note on the itch.io page explaining this. Sorry for the inconvenience!