For emulators which use recompilation techniques, I suppose it’s technically possible to make them execute malware. But writing your malware in legacy XBox/PlayStation code to embed it in roms would also make it some of the most sophisticated in history just to infect a handful of retrogamers so I think it’s very unlikely…