The false positives are triggered by the NSIS installer and our customization to the OpenVPN installer (to save your VPN username/password for each VPN location so that you do not need to enter it manually).

Unfortunately the same NSIS installer stubs are being to bundle viruses and malware.

More information is available here:

An example of the false positives you may see is available here: