itch.io

Thanks for flagging this — I looked into it, and it's a false positive.

The tool is built with PyInstaller in one-file mode. That kind of build unpacks itself into a temp folder at runtime, which is the same pattern some droppers use, so heuristic scanners get twitchy about it. Only 5 of 70+ engines flag it, and none of them name an actual malware family — Microsoft's "Wacatac" is a well-known catch-all label, SecureAge and SentinelOne just report generic ML verdicts, and the rest are generic too. BitDefender, Kaspersky, Avast, AVG, Avira, ClamAV and everyone else come back clean.

I'm rebuilding it as a folder-based release with proper version metadata, which should clear most of this up, and I've submitted it to Microsoft for false-positive review. I'll post the new SHA256 here when the update goes live so anyone can verify it.

Thanks again for taking the time to check and report it — genuinely appreciated.