Windows antivirus and VirusTotal.com triggered over Mary-Celeste-Alfa release.

Hello.
Windows Defenders is triggered over the lastest release, Mary-Celeste-Alfa.
Supposedly, it contains a Trojan script named Wacatac.h!ml

Can someone confirm this is false positive, please ? Considering GitHub was recently hacked via malicious Visual Studio Code extensions and thousands of repos got busted with malwares and credentials stolen, I am not taking a single risk unzipping or running something that triggers my antivirus.

Thank you.

Start by inspecting the Mary-Celeste-Alfa release artifact and the reported Wacatac.h!ml detection, then compare the release contents with the project source and build context. Done means establishing whether the alert is a false positive or identifying the affected artifact and documenting the evidence and next action.

Written by the indexing model from the issue text.