Found the cause of my Sophos malicious virus alert. Whilst using Nearpod to grade students.

When my students have finished a Nearpod I receive a report. When I open this my virus killer Sophos brings up an alert, but using any other browser it's fine.