Hello, that's a false positive given by just 1 of 74 checks in Virustotal. https://www.virustotal.com/gui/file/c3bdb1ddbb1e7318fb54c18a49fe6cc306e6b0c7de72...
This is highly probably caused because the executable isn't signed (I didn't sign it because it's an extra development step that doesn't change any functionality, It only serves to identify the developer).
This software isn't a virus, it's made in a build of Godot engine with excess modules (such as 3D) stripped off from it to make it lighter. The source code of the engine, and this software specifically, is available publicly on Github for anyone to check