It happens to software that's signed too, according to folks on my issue tracker. What I do now is just upload the binaries to VirusTotal and click the upvote button, before I put them on my website, so that people can double-check they came from me.