We use pkg to pack a Node.js executable as part of our VS Code plugin and it worked for us pretty good for the last coupe of years

Just recently we have upgraded to the Node.js 22 and since then we started to get false positive alerts from the virus total, this is the example of such

Signing the binary did not help

Since these alerts block us from working with some of our customers, we would appreciate any advice here

Thanks!