Wow. I recall when this first happened because of SourceForge being sold to shady people who decided to put ad/malware loaders around the installers of all the exes hosted there (like FileZilla). But that was the early/mid-2000s. It's hard to believe it is being allowed to happen again in modern times.