Pirated copies seem like a blackbox of potential malware, even if virus scans fail to find any problems (and they often give 10-30% false positives on most keygens/cracks). Even if the code is hosted in github, there has been plenty of cases of malware/viruses being hosted there too.