In reality any file can be infected, but if the file was downloaded from the creator's official site it is unlikely that the file will be infectedBut just to quote Turbodriver from his own Patreon post, because this was spreaded here several times: "PACKAGE files should be safe as there are no known ways for them to cause issues to your computer."