I worked a lot to find the answer. I removed code parts, modules, but no change. At last, I found the solution. One jpeg picture caused the false positive alert. I saved it with another type (png). And - drumbeat - the app is safe...
Thanks for my weekend work and the lost clients.