Most CPU miners flag up as malware because botnets embed them.

You will have to read the details of the threat and be satisfied it is *only* classed as malware for being a miner and nothing else.