The problem is the delivery mechanism. Malware is quite rare in linux because we trust the maintainers. Unlike in windows where you’re normalized to download executable off of the internet

Edit: What I meant is that notice almost always all of the attack on linux is supply chain based and not direct malware download. Be it via typosquat, package manager repository hijacking, or even long game like xz