How do you know the authentic sci-hub isn't doing that?
Targeted attacks might be possible based on the file contents or using a side-channel to ID the downloader; meaning only specific targeted users would get the malicious files.
Either way, being able to hold Sci-Hub accountable as this source would be important.