Hi Paul,
you are right, that is a false positive. Unfortunately, we have not much control over how McAfee flags package contents of third-party packages installed via conda-forge.
Best regards
Steffen
3 Likes