This is a great start! Thank you for setting this up.
I think another avenue to pursue here is writing a blog post on nim-lang.org calling out the AV vendors for their poor detection. If we can get that on to Reddit/Hacker News then we stand a good chance of the employees of those vendors to read the blog post and do something about it (or at least tell us how we can resolve this ourselves). Happy to help review/edit such an article.
