Virtualbox is a sandbox. Malware is not supposed to get in, or out, generally. Mac is also supposed to be somewhat close to invulnerable in itself. The only way Malware could ever have a chance to enter your XP vm is if it's connected to the network, and it shouldn't be, since it's so internet...