If the admin portal got infected with a virus or malware what is the impact to current instance and other client instances?

Admin portal is independent. It would be limited to the database for the unique instance IF something were to become infected.