Could be similar to <a href="https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/false-positive-malware.html" rel="nofollow">https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/...</a>, but I still wish authors responded more promptly. It's been 24 hours since the first report.