Your antivirus was not objecting to your ribbon modification. It is objecting to the presence of the VBA code. Macros have been used for malicious code for a very long time.

Antivirus software can't tell the difference between malicious code and safe code.

There is no secure way of writing or distributing VBA code. The best you can do is sign your code with a code signing certificate.