This is a false positive. Don't think there's anything I can do on my end to resolve this.

You're always welcome to inspect the source code, build the mod from source yourself, and/or decompile the distributed jar to confirm it matches the source code in the repository.

Malwarebytes marks file as safe so yeah, must be a false positive

Just wanted to add, yesterday I did scanned this particular version with VirustTotal, yielding 10 detections. Today it went down to 2:
https://www.virustotal.com/gui/file/956d21e619d13d4a064513c4a0d490c382795b8466c79d6db61431d8532ef461
Here's how it used to look like yesterday:

Perhaps vendors found out it's a false-positive and corrected it.

Maybe interesting, maybe not, next version (and any newer after that) has no detections whatsoever:
https://www.virustotal.com/gui/file/e71e9963e24f9a9b8f471709ae1340b0be3093d00c53e23687a638de9e925126?nocache=1

Down to 1/61 now. Don't know what happened here, but going to consider this resolved.