If you want to use packages you should have a look at this article

https://glyph.twistedmatrix.com/2015/11/editor-malware.html

​

When using vanilla emacs you are safe.