Humble Bundle

You're being pedantic. The file extension is .torrent. Lay people call those torrents.

You, yourself just used "tracker" wrong. The tracker is the server hosting the torrent peer list, etc. Not the .torrent file.

And then your followup comment is just you calling the original commenter ignorant. You're not helping at all.

Torrent files contain hashes that verify the contents of the associated files. They are not easy to fake by injecting malware. That would require finding a hash collision so your malware files (plus some padding) hash to the same value found in the legitimate torrent file. That not some easy task to do.

Downloading a torrent file from a legitimate site—and its associated data—is as secure as downloading any file from that same site.