The AutoHotkey community definitely needs to keep watch on Google. Here we are weeks later and supposedly a clean bill of health from Google Safe Browsing, and VirusTotal (owned by Google) is still showing that AutoHotkey download directories for version 1 (AutoHotkey_Basic) and 1.1 (AutoHotkey_L) have malware and are malicious. Which makes no sense, since Google Safe Browsing shows it as safe, so why doesn't VirusTotal report the same information is anybody's guess.
To see, put the AutoHotkey download directory https://www.autohotkey.com/download/1.1/
on the VirusTotal Url scan https://www.virustotal.com/#/home/url
The concern with that is the catch-22, where when other anti-virus and anti-malware companies see a bad report from Google Safe Browsing, they lazily do the same. Looks like the other vendors have become a bit smarter about this, but the issue and the Google trap appears to be still present.