Sorry for the late response, but it's a false positive reported by Avast. It happened once recently too, then they cleared it. Basically users of Avast need to report it as a false positive and they'll take us off the list. In the meantime, you can just tell Avast to ignore it I think (I don't use AVAST so can't say exactly how you do it).

I'm not typically the paranoid type, but given we've had two such false reports in a short period of time, I guess there is someone out there trying to be annoying, given it's reporting a threat from an API node (it's not even a web site, so the claim is pretty ridiculous).