From that page:

N.B. A few antivirus programs incorrectly flag Policy Plus as malware. Policy Plus is a powerful tool and so may cause problems if used recklessly, but it is not malicious.

No so much different than "hacking tools" or similar being detected as "malware". In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today.

> In other words, just another example of the paranoia typical of the authoritarianism that is so common in the software industry today

I don't think it's authoritarian, just that the more positives your antivirus detects that others don't, the better you can sell it. Something like Process Hacker should have never been detected as malware, as it can't harm others, but it ups those numbers.

Same here. Surprisingly, Microsoft* just allowed it, no problem. Edit: Also, Google doesn't trigger on https://github.com/Fleex255/PolicyPlus/ (note the trailing slash) but reacts to https://github.com/Fleex255/PolicyPlus (no trailing slash). Weird.

VirusTotal summary page says that it is detected by five different engines: https://www.virustotal.com/gui/file/dca4ecd769253d3b4a165a5b...

* Both Edge SmartScreen and Defender.

I get the same on Firefox as well, and this is the first time I've seen such a warning ever. I definitely don't get it for other github projects.

The same happens sometimes when trying to download netcat and almost always when downloading any of the SysInternals password recovery tools. Cybercriminals use these tools in attacks and so they must be malicious! You know, like bank robbers use hammers and cars...

If chrome uses something like the public safe browsing blAPI malware checking is done with hashes of full urls