This is probably a false alarm. Nemp does not contain any spyware, trojan horses, keylogger, whatever. Trust me.

However, Nemp is Open Source. It is possible, that some evil person added some even more evil hidden features. Be sure to download Nemp only from my website, or other sites you trust.

The cause for the false alarm are probably the "Indy Components" I use in Nemp for internet related stuff. Sometimes a scanner thinks: "Woah, there is some network code in this binary. It must be evil..."

If you don't trust me: Check the binary on services like Virustotal.com. Most scanners wont't find anything wrong with Nemp.