Only get it from the usual site and not from anywhere else it might be discovered.
It would more likely to be Malware than a virus if something was written into it.
You just can't be to careful. However, it would be written in a way so as to infect a computer rather than affect Sleepyhead itself.
Malware writers would have no interest in Sleepyhead itself, but they might use it as a platform to get Malware onto a computer.
So same applies with all software, get it from the makers main site and not some other site with lots of other software on offer.
Every journey, however large or small starts with the first step.