[WalterBright]

It means that the D compiler itself is not the doorway for the malware.

Cross-compiling is a common practice, too.