What if a service like VirusTotal detects infected code inside the files?

There are 2 possible reasons:

• False positive scan results
• Developer (intentionally or unintentionally) used this source code to create the product.