VBS:Gamaredon-CM [apt]

A antivirus is detecting piwik.js as infected with “VBS:Gamaredon-CM [apt]”.
Is this a false positive?
Antivirus used = AVAST

I’d recommend checking your piwik.js with the official one from the download zip (keeping in mind that plugins can append their own code).

But VBS sounds like visual basic script which is completly unrelated to websites.