Yes. If your file explorer auto-generates thumbnails or if Kodi’s add-on installer executes pre-install scripts, malware can trigger. Always scan first.