P2P releases can come from anywhere. If you are worried about viruses and malware, it’s probably best to avoid them even though the danger is still very low.
Scene releases are almost always purchased legitimately by the group for cracking. The most popular repackers usually use scene releases as their source.