I don't care what's in the source files, I care what's in the files someone posts for me to download to use their coin.
Very true. The dev has the duty to ensure the file he provides is virus free.
I am surprised to see only 3 out of 191 clients have viruses in them. OP should scan wallets with malwarebytes, I imagine you will find a few more with trojans in them.