[Issue]: Setup is detected as malicious by 2 of 72 vendors on VirusTotal

[ChristianGalla]

What happened?

Google and Varist detect the setup file of the latest release 1.2.2 as malicious.

https://www.virustotal.com/gui/file/2d5ad523aa6182205da77c0eb8210638aaa8792f4e6a4bc12e1ac854c5455a68

I am not sure if this is related, but it looks like the copyright metadata is not correct:

What did you expect to happen?

No malicious software is detected

Version

1.2.0 or newer (Default)

Which version of Windows?

No response

Which locale?

None

Which shell are you running NVM4W in?

No response

User Permissions?

Other, please describe

Is Developer Mode enabled?

None

Relevant log/console output

Debug Output

n/a

Anything else?

I created a bug issue instead of reporting a Security Vulnerability, because I assume this is a false alarm.

[coreybutler]

This is a false positive. Several other AV tools have incorrectly reported this as a trojan too. Ikarus was the most recent (see here).

Since you posted, Google has already been removed from the list. I'll try to reach out to Varist when time allows (I have to reach out to each of these vendors individually).

I'm going to leave this open because the metadata issue is a bug... looks like an encoding issue.

Thanks for reporting!