Avast gives 'infection blocked' when doing npm install

my anti-virus Avast gives a notification of an infection being blocked. This is on Mac osx. the infection is JS:Downloader-EKT [Tool].

Is this a false positive? Are there more people who have this issue?