Virus, Its a false positive.
This has been discussed many times, in this thread.
Have a look for yourself...
https://babiato.tech/search/8376394/?q=virus&t=post&c[thread]=318&o=date
Zillya, the antivirus company that has flagged the false positive, is a Ukrainian company that does not have good reputation
Yet all large Antivirus companies (Avast, Bitdefender, MacAfee etc) do not flag WP Rocket with any kind of virus
Logically this concludes that in fact, it's a false positive and not a WP Rocket file at fault
You can research these facts for yourself, much has been discussed and written about this on the World Wide Web