As you can see from my VT link, from the day before this was clear on all scanners, so it was a virus signature update between those two days that triggered this. When previously it wasn’t considered a problem.

When this happens on long established software (and coming from sourceforge) it is usually an indication it is a false positive and the VT results tend to support that view.