I feel for you, bro.
But that number went from 4 to 6.
And to make matters worse, NordVPN detected it as a malicious file. I just downloaded something from Otomi Game and it passed, but yours didn't.
I totally understand why that would worry you, especially when security software flags anything at all.
That said, the jump from 4 to 6 detections on VirusTotal is still extremely low and very typical for indie games, especially ones made with engines like Godot. These are heuristic/behavior-based flags, not confirmed malware detections. If this were actually malicious, you’d see dozens of engines flagging it very clearly, like the image below, not a small handful with generic warnings.
Regarding NordVPN: some antivirus and VPN suites are particularly aggressive and tend to false-flag unsigned indie executables. That doesn’t necessarily mean there’s anything harmful in the file.
To be fully transparent, the game files are not encrypted. Anyone can decompile them using tools like
You must be registered to see the links
and inspect all scripts, assets, and models directly. If there were anything suspicious, it would be immediately visible.
False positives like this are unfortunately very common with Godot builds and other indie engines. I completely respect you being cautious, though, that’s always the right instinct when downloading anything online.
If you still don’t feel comfortable, no pressure at all. I just wanted to explain what’s going on and give you the tools to verify it yourself.