As long as you can execute anything you want on your Mac, you can execute malicious code. Without the infection vector (which is probably not known yet), it is

As long as you can execute anything you want on your Mac, you can execute malicious code. Without the infection vector (which is probably not known yet), it is impossible to say whether it is user error or a security vulnerability.