So I just heard of this module called PKG by Vercel and this other one called NEXE and I used them to make my NodeJS apps into binary/exe files. They work for me since I set up my computer the way they said so in the documentation, but when I sent it to my friend over Discord, Windows won't even let him extract it since it's getting detected as malware. VirusTotal seems to say it's fine except for one or two anti-virus software but overall it looks good. Is PKG or NEXE adding stuff into my code? Or is this just a fluke by Windows Firewall? How can I fix this?

// hmmmm.js
const https = require('https');
const fs = require('fs');
const googleLogo = "https://www.google.com/logos/doodles/2021/seasonal-holidays-2021-6753651837109324.3-ladc.gif";

const file = fs.createWriteStream("google.gif");
https.get(googleLogo, res => {
    res.pipe(file);
});

Ran this in the terminal:

pkg -t node14-win-x64 hmmmm.js