[horde] ist horde-5.0.4 archive partial broken?

[Andreas Schulze]

Hello,

while downloading http://pear.horde.org/get/horde-5.0.4.tgz using a http virus scanner
the download was blocked. We found the horde-5.0.4/js/plupload/plupload.silverlight.xap archive to be somehow suspect.

Mar 21 09:14:00 proxy savapi[16589]: A malformed archive header was detected for file
 '/tmp/avwg_Pktgy2.tgz --> avwg_Pktgy2.tar --> horde-5.0.4/js/plupload/plupload.silverlight.xap'

The av vendor replied:
[...]
unzip -t plupload.silverlight.xap
Archive: plupload.silverlight.xap
testing: AppManifest.xaml OK
FJCore\IJG.txt: mismatching "local" filename (FJCore/IJG.txt),
continuing with "central" filename version
testing: FJCore\IJG.txt OK
FJCore\JAI.txt: mismatching "local" filename (FJCore/JAI.txt),
continuing with "central" filename version
testing: FJCore\JAI.txt OK
FJCore\License.txt: mismatching "local" filename (FJCore/License.txt),
continuing with "central" filename version
testing: FJCore\License.txt OK
FJCore\README.txt: mismatching "local" filename (FJCore/README.txt),
continuing with "central" filename version
testing: FJCore\README.txt OK
testing: plupload.silverlight.dll OK
At least one warning-error was detected in plupload.silverlight.xap.
[...]

I don't know if using unzip is correct but if so I find the "\" suspect...
Could somone clarify whether the archive is correct or broken?

Thanks
Andreas