[alvarnell]

Actually, it cannot be a false positive since Heuristic signatures only detect suspicious files, not necessarily infected ones. In this case it is looking for any zip file that contains one or more javascript files, which is what compiled_coffeescript.zip is. Users should simply verify that the detection is a valid file and ignore any future reports.