My Norton security system (running on windows) says there is a virus (Trojan.Gen.8!cloud) in the program "uninstall expo xde.exe) that is part of the installation package for Expo XDE on Windows.
We think this is a false positive. Other software built with Electron (like XDE is) sometimes seem to get falsely flagged from Googling around about this.
If you want to audit the code, all the source is here:
We don’t believe any malware is included.