There are many reasons you could legitimately hold a drive with a zip bomb; maybe you're researching them for security? Maybe you collect interesting examples to teach the concept?

(Note: this doesn't mean you should go on record with such a defense without an attorney present, just saying why it shouldn't legally be regarded as malicious without a lot of other evidence.)