Oops. Doesn't sound like a high risk as long as you are aware and download any MSI stuff directly from MSI.

https://arstechnica.com/information-...-chain-attack/