Exactly because it's known - malware is only considered malware if you install it without knowing about it.
But if you know about it you have a choice not to buy / install it, like with games like Subnautica 2.