So you’ll go to a site like TPB and some torrent will have loads of comments about how it’s clean and works etc. etc. I was thinking that this is still dangerous though right? A hacker could alter the executable file to make the program work but at the same time ALSO install malware into the victims computer without the victim even knowing it’s happening is that correct?

Yes..and it’s illegal ,especially since you "know" you’re pirating