Im not aware its possible to put malware in a flac file and its still playable. There are a few examples from 2007-2008 but they were to do with flac media players. Microsoft showed you could corrupt the meta data but its then unplayable. I think BlueRingedOctopus comment has the right idea.