Plugin flagged by Avast anti-virus

That’s definitely a false positive from Avast, which is notorious for obvious false positives affecting Google, DigiCert, etc. over the years.

I reported the false positive to Avast and you can as well here:
https://www.avast.com/en-us/false-positive-file-form.php

Update: Avast/AVG have fixed the issue.

They suggest updating their software’s database on your device if it has not been updated already:

https://support.avast.com/article/update-antivirus/

https://support.avg.com/SupportArticleView?l=en&urlname=update-avg-antivirus

Thank you very much!