Thank you for your update. In fact, it was reported that when unzipping after downloading, McAfee LiveSafe isolated the virus-infected file, although it is unknown whether it was a misdiagnosis. Sorry to trouble you, but could you please confirm?
There may be a combination of things that I haven't been able to single out. I had bought the entire Yanfly MZ plugin library, which is dozens and dozens of extra plugins. There are some that are still unused. I'm guessing that anti-virus is mad that these are extra javascript files that aren't being used at this time. I've had other reports that a certain unused plugin file can't be loaded, in which I just remove from the project completely. If you do see any logs that specify a certain filename, please let me know and I will trim it out in the next update.
Otherwise, it's a false positive from the antivirus.