Yes, I viewed a spam post which contained an enhanced media link (I saw it only as an image placeholder). It was flagged and blocked by my security software. I have all ads and trackers blocked, so it wouldn't have been any of those (I'm here too much to count as an impression anyways). I immediately removed the link/placeholder using the rich media post editor. 17 people had viewed the post prior to me. It was called URL/MAL or somesuch by my security software.
I'm wondering if the file at the end of the link was only swapped with a malicious one when the spammer detected that the account was flagged (I think I could determine a way to detect this, so it's within the realm of possibility). And as we have to view the posts to flag them, it's kind of like saying if you delete my spam, I'll infect your users... As there's no telling what malware they have at their disposal or whether all security software can detect it, it's just safer this way.