We wrote to the person that said that and it turned out they made a mistake or just wanted to hurt our reputation. Allegedly Malwarebytes gave this positive, we ran it ourselves and it said it was clean. Feel free to run an anti-virus program on it yourself. There is 0 point for us to put viruses in a game we want to sell and is already making good money on Patreon.
But even when false the comment was causing a lot of confusion. People did just read the first comment and took it for granted (classic internet), then come to our discord talking about it.
We told the person that we will delete the comment to avoid confusion if they can't tell us how they even got the idea that there could be a virus, and we got no reply. So we deleted it.
I fear this comment will cause confusion again since people won't read everything, but I guess we will just have to deal with that now :/
They probably meant the promt to allow the installation of prerequisites through the Itch manager. Usually it's about getting some Redist, DX or Platform specific libraries (Here most likely the UEPrereq). Needs elevated rights too, so it's a good thing if people look twice there - but claiming it's a virus with no foundation is not.