I downloaded a VST FX zip-file from a well known vendors' site. My security program spotted a very bad malware inside the zip. I've been informed that the virus could sneak in after the download or that the alarm could be false.
Neither of those explanations really made me feel safe.