A standard Red Book audio CD cannot install malware to your system. It was the data CD with music that Sony shipped made it possible.
This is why, I, sometimes a CD buyer, believe all listeners of Audio CD should try maintaining the status quo of CD, as defined by the Red Book, and resist/boycott any attempt by the industry to "make a better CD" (e.g. SACD, Audio DVD, Audio Bluray), or "add more functionalities" to the existing CD standards.
Technologically, I would be happy to see a Doubly 5.1 Bluray Audio CD playing at living room from my surrounding speakers (better channel separation allows improvements of sound reproduction even on speakers of moderate quality), or CDs with real filesystem and error correction (an Audio CD by its original design, only streams music in real time, as if it's a digital LP track. There is no way to even know if the data you've just read from the disc is correct or not [0]), or a FLAC-encoded stereo CD (it would allow 30% more songs to be recorded on a single CD).
However, I'd better to live without them, as history has shown: all the newer standards would definitely be more "consumer-unfriendly" at best (go to any AV forum, and see the compatibility issues caused by HDCP [1] for example...), and malware at worst. The Audio CD, even with its historical limitations, is good enough, it plays lossless music with 44100 kHz sampling rate, and it did/does this job well.
Also, you may have noticed the recent renaissance of LP discs, and some LP lovers' arguments of how analog has better sound quality. While I don't believe those arguments are persuasive, I'm highly supportive of the LP industry for the same reason - you cannot install malware on a LP disc.
[0] Why I Ripped the Same CD 300 Times
https://news.ycombinator.com/item?id=17649374
[1] https://news.ycombinator.com/item?id=1689823