This paper can be boiled down to:

If you have malware on your CI machine it can infect the artifacts it creates.