Thanks for flagging it! As the previous comment mentions, these are known false positives — 2 out of 70 antivirus engines flag it, both using heuristic/ML detection (not actual signature matches). All major antivirus software (Windows Defender, Kaspersky, Avast, Bitdefender) report it as completely clean.
This is a common issue with Godot 4 games — the engine packages everything into a single executable which looks suspicious to aggressive heuristic scanners. You can verify on VirusTotal yourself: only Gridinsoft and Trapmine flag it, both known for false positives on indie games.
I've added a note on the itch.io page explaining this. Sorry for the inconvenience!

