Virus embedded in EPG Source

I saw a post on this sub yesterday about an full EPG source for Strong.

One of the comments showed that the file may have contained a virus on some sort.

My question is, if you added the source as an EPG on your android/iphone, could it now be infected with a virus?

And if that's the case, how can you go about ensuring that your phone is safe?

Thanks