Question about different addresses

Hi guys

Quick question: Let's say I sign a malicious transaction on one address, could this drain another address I own created with the same seedphrase? If an address has no token approvals at all, can it even be in danger?

Thanks very much