Hi, thanks for buying the DAZ Library. This is one we haven't heard before. It most definitely is a false positive, but we will check what causes it. It is a local service running. We will be back with you after investigation.
Update: it has to do with the signing (as with most itch distributed apps, because devs here often don't have the means to pay for signing certificates) and a specific flag. We assume it might also have to do wtih the way we sync products from different locations . We are going to update the smaller items and discuss the signing issue. Thanks for raising the question. We hadn't gotten this specific one yet.