In my experience, this has become increasingly common when distributing software that isn't signed.

I don't sign my software due to privacy concerns, and it regularly gets bogus detections on VirusTotal and Google's similar systems that flow into Safe Browsing.

Mostly from Norton and BitDefender, who are notorious for not replying to any inquiries/submissions. AV is a complete ripoff nowadays and downright malware (coming from someone that had to cancel an accidental Norton subscription for his usually technically sufficient parents, it's a maze of broken support pages and infinite redirects between different language versions).

It happens to software that's signed too, according to folks on my issue tracker. What I do now is just upload the binaries to VirusTotal and click the upvote button, before I put them on my website, so that people can double-check they came from me.