Humble Bundle

You're being pedantic. The file extension is .torrent. Lay people call those torrents.

You, yourself just used "tracker" wrong. The tracker is the server hosting the torrent peer list, etc. Not the .torrent file.

And then your followup comment is just you calling the original commenter ignorant. You're not helping at all.

Torrent files contain hashes that verify the contents of the associated files. They are not easy to fake by injecting malware. That would require finding a hash collision so your malware files (plus some padding) hash to the same value found in the legitimate torrent file. That not some easy task to do.

Downloading a torrent file from a legitimate site—and its associated data—is as secure as downloading any file from that same site.

Not OP, but how do you inject anything into a torrent, assuming the torrent is official? I'm not aware of that possibility.

I re-downloaded the zip file in question but this time directly. Scanned it again and it came back OK. So you're telling me that HumbleBundle will let these torrents potentially have viruses? I thought the files came from some resources HumbleBundle controlled.