How to spot a safe game download
Get a game from its developer or an official store. Steam, GOG, Epic, itch.io and the studio's own site are the places that matter.
Check the address bar before you click. Look-alike domains are a common trick, so type the store address yourself or use a bookmark.
Be wary of any page that offers a paid game for free. Those files are often bundled with malware, and the sites that host them have no right to share the game.
Open-source games publish checksums or signed installers. If the developer lists a SHA-256 hash, compare it after downloading.
Keep your system updated and use the antivirus that ships with your OS. That is enough for games from official sources.