So while compressing a few jars into a file to send to my friend so he could test out a compilation of mods i gathered so he wouldn't have to painstakingly download every single one via CurseForge.
Windows Defender randomly stepped in and detected said folder as a "Trojan:Script/Wacatac.B!ml", I decided to see which file could have been causing said issue (having a feeling it wasn't WinRAR forging a trojan itself) by deleting each file one-by-one.
For some unusual reason it ceased triggering windows defender when i deleted "create-1.19.2-0.5.0.i.jar" from the folder after having compressed it.
My best guess is that this is a false flag as I did download the file from CurseForge itself, and searching up online yielded no result to said issue except for something else that was unrelated. (NOTE: Windows Defender only flagged it when i made it into a ZIP folder via WinRAR, it had zero issues when it was a standard folder).

This is a windows defender issue that has/should be fixed now

How did you fix it internally? Does it have something to do with jarjar? Having the same problem with my own mod.

How did you fix it internally? Does it have something to do with jarjar? Having the same problem with my own mod.

Microsoft's fixed it on their side. When you update your pc it'll update defender and stop showing the warning