Use the megathread, it has lists of trusted providers (goat symbol).
Of course, that’s not good enough, so my “antivirus” is to use an entirely separate device for gaming/piracy and a lower power device for production and work. If my gaming device gets compromised, the attacker will just know how many hours I spend in vampire survivors :)