Files bundled in "repacks" or distributed through unverified third-party sites are frequent vectors for malware. This includes spyware designed to track activity or ransomware that can lock personal files.