Did some research as I was interested.

Win32/Lineage[0] is a bit of malware (or perhaps a characteristic of malware) that steals credentials. It looks like other software has had false-positives for this before (i.e. optipng[1]). You can also submit eul as a false-positive here[2].

[0]: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclo...

[1]: https://github.com/madskristensen/WebEssentials2013/issues/5...

[2]: https://www.microsoft.com/en-us/wdsi/filesubmission

Thanks, I think I know what causes it. Will fix asap.