Knowing the source can help determine exactly what kind of scam or file it might be. MIT-LCP/physionet-build - GitHub
Most modern antivirus tools, including the WinZip "Scan for Threats" feature, can check the contents of a zip file before you extract them.