Yes at one point they were bundling crypto miners within their releases, I’m not too sure if they still do however there’s a lot of trust and reputation within the Piracy community
Also the fact they’ve done it once makes it very possible for them to do it again (though I’ve got no idea if they even stopped bundling malware and cryptominers)
1337x demoted them at one point for their shady practices