If you have this file on your system, follow this forensic guide.
Generally, .cpk files are because they are data containers, not executables. However, like any file, they can host malicious payloads inside compressed scripts (e.g., JavaScript inside a game CPK). Red flags: