@391010114192148, thanks for the heads up!
This looks like a false positive in lyrebird and snowflake-client and is likely because of this change: obfs4 is renamed to lyrebird (#40869) · Issues · The Tor Project / Applications / tor-browser-build · GitLab. Some antiviruses consider that files that have not been seen/used by a lot of users as suspicious. This can sometimes happen when there is a new version of the software.
If you downloaded Tor Browser from our website or used GetTor , and verified it, you have nothing to worry about.