Eset Smart Security has just flagged my Caddy (v2.75 - a useful reminder that I should update!) as being suspicious, being a variant of what they call “Win32/Packed.GoLang_AGen.AQ”. It offers to delete it, but fortunately gives me the option not to…
It’s unfortunately a thing with software written in Go. Because Go compiles to a single binary that includes all of the Go runtime etc. lots of different software, including actual malware written in Go, can look the same to a virus checker and it gets false positives. I’ve seen similar threads in other software projects forums.
As xtaz said, this is common for Go binaries. It’s frustrating how naive anti virus software is. It seems they only offer the “restore from quarantine” as the solution.