First, the whole purpose of a crack is to remove malicious code. So you're likely coming out ahead.

Second, you shouldn't be running any proprietary binaries unsandboxed with Internet access. My standard use of Windows is to install a fresh VM, install whatever software(s) I want, kill all network access but for my local Samba server, and then do my work. Lack of updates that pull the rug out from under me is a feature, and when there are features I want it's easy enough to repeat the installation process while watching TV or whatever.

More than often, not.

I dug around a little bit and couldn't find a source supporting either of our claims. I did find verified examples of crypto miners in cracked software[0]. I think the threat landscape for cracks has probably changed with the rise of crypto mining.

0. https://decoded.avast.io/danielbenes/crackonosh-a-new-malwar...

That's "precracked" software, which is big enough to disguise the presence of malware. I was talking more about patches/keygens to be applied, which are relatively tiny compared to a cryptominer (and, although I'm not sure about recent times since I've been out of the scene for over a decade, crackers used to be quite skilled and proud of making their releases tiny.)

There are plenty of trusted places that you can get clean cracks and keygens that have been thoroughly tested.

That being said, a small file size doesn't mean anything in the case of most cracks/keygens because you have to give them admin access to your system. Which means it can download and install anything it wants in the background.

It is possible. But there are respectable websites with cracked software which generally does not allow for malware. If you would be a little bit picky and careful, the chances are not that high.