itch.io

This is what is called a 'false positive', especially when literally every other antivirus in the list says it is ok.  RenPy games are often false-flagged due to being 'exe packed'.  If you look at the notes it says 'contains elf' and 'contains pe' which point to why it was flagged.  Most antimalware vendors have white-flagged RenPy stuff because they know that it isn't malicious (RenPy being an open-source project) so they know how it works.

If you bothered to throw it into a VM and monitor traffic with wireshark or otherwise ask other trusted techie people before throwing around accusations, then you would look far less foolish here.

Speaking of foolish, repeating what some people from Reddit have (falsely) claimed means you're taking the flak for their bad information.  Again don't believe everything you read.

You can state factually 'I scanned this in Virustotal both exe and zip and some detections came up so I dunno seems sus can anyone verify'.  That means you're concerned over the potential for malware but aren't making accusations without proof.

I've literally called out a certain ported-from-mobile Steam PC release as malware due to a kernel-level spyware driver they install using powershell scripts and claim it as 'anti cheat' (for an offline single-player experience).  Then before I had the opportunity to post a detailed technical breakdown (that I was working on), ReddiTrash and others felt free to plagiarize my work instead (taking credit for the discovery for clicks/karma).

Be vigilant but also be ready to prove what you state.  Since the dev has been active here it is an easy case of 'hey what is this' type of deal.  The dev can mitigate this in some ways since RenPy is open-source and certain features can be enabled/disabled to avoid most false detections.  However, doing so may lead to a much larger file size and a drop in optimization/performance so the tradeoff may not be worthwhile.