I am working with several maintainers of Homebrew currently to verify that several programs in the cask library now ship from the developer with trojans. To verify the claims I created a Virtual machine in Oracles Virtualbox running Elementary OS (linux based on debian).
From there I downloaded the suspected files and uploaded them to virus total (https://www.virustotal.com/gui/file/71e362921a19923d8cd19052641718b91b8c967aa1b0f277e7732c2901a6234b/detection). I downloaded both the Windows exe file and the Mac dmg file. The Windows file came up with malware but I was unable to check the Mac version do to a large file size. Following this I deleted the Virtual Machine.
Is there a chance that this DMG, which is possibly infected, could attack my computer which is running MacOS? Clearly the windows exe wouldn’t be an issue but what about the DMG?