Hi there, it's most certainly a false positive, not entirely sure why it's happening unfortunately but there seems to be a few cases of Godot builds being flagged as malicious when exported using embed PCK.
Link 1Link 2Link 3
Its because the file has no publisher names or developer name in the file. So it gets flagged as unknown, and there for claimed as unsafe.
