I'll just copy-paste my previous response in regards to this topic:
Trojan Heur is usually a false-positive, you can read more about this virus, it gets detected by anti-viruses in apps that aren't actually harmful to your PC. It was also mentioned couple times on the previous itch page.
A possible reason for the false-positives. I am embedding pck (game resources) files in the .exe...
"On Windows, PCK embedding is also known to cause false positives in antivirus programs. Therefore, it's recommended to avoid using it unless you're distributing your project via Steam as it bypasses code signing and antivirus checks."