Only download the links that are in the post and never from the comments. Unfortunately, itch.io allows hackers to register with misleading names and post virus links. Whenever I see them, I delete them, but they appear very frequently. The safest option is always to download it from Patreon or from the body of the post, not from the comments.