And by "new" we mean since 2016 - the current owners own Sourceforge for almost double the time the previous owners that bundled malware did :-P
It’s forever a tainted name, I know about the owners, still feels bad.
Goes to show how much better bad news travels, and/or how it sticks in the mind. I could have sworn that the DevShare thing was more recent than from 2013 to 2016, and until looking it up just now I was unaware SF had officially ended the practise (with the change if ownership in 2016).