Virustotal

I do not know why and as all the other scanners are not detecting a problem this suggests it’s a false positive.

You can see here that Akismet (bundled with WordPress) is also flagged with the same ‘virus’:

https://ww.wp.xz.cn/support/topic/akismet-4-0-8-is-vex-webshell/