Question about Content Packs

Just wondering whether it's possible to put ransomware inside a workshop content pack for Steam? It's a rumour that's circulating in a community. I do have the details of which community it is and the content pack on hand however I'd rather ask first. I mean, it could be possible, right?