NiceHash is on GitHub and you could always build it yourself if you’re worried. I think the reason it flags as malware is because virus scanners flag anything crypto mining-related as malware by default.