I did not find any evidence of malware in the repos from your link. Vulnerabilities also exist for iOS and MacOS.

My original claim was that, in order to avoid malware in repos, all you need is free software.

If you want to avoid all vulnerabilities instead, try Qubes OS.