Maybe they could retool as a Cloudflare/Akamai competitor? Their network of mirrors is probably the one thing still distinguishing them. Or they could go full-FOSS and somehow integrate with distributions, like a cross-distro Launchpad, but that's a very very very niche market. Or they could find a mobile-oriented spin (I honestly don't know anything about mobile dev).
Or, and I say this very seriously, they could find a way of getting bought by Microsoft. A lot of SF projects are legacy win32 apps that people still find essential (FileZilla etc); MS could buy them and build an appstore that actually has the stuff people want, with real developer tools and workflow powering it all. MS backing would remove the malware stigma, at the very least.