Could be an infected source code for a miner or wallet which is compiled on each platform (windows, linux etc) ...