Trojan Heur is usually a false-positive, you can read more about this virus, it gets detected by anti-viruses in apps that aren't actually harmful to your PC. It was also mentioned couple times on the previous itch page.
Also. Weirdly enough this trojan doesn't get detected in the latest versions of the game, only in the demo it seems. I'll upload a fresh updated demo version soon just in case, to prevent these heur comments from popping up, they make me feel guilty for some reason lmao. But yeah don't worry it's safe.
A possible reason for the false-positives. I am embedding pck (game resources) files in the .exe...
"On Windows, PCK embedding is also known to cause false positives in antivirus programs. Therefore, it's recommended to avoid using it unless you're distributing your project via Steam as it bypasses code signing and antivirus checks."