Hacker News Reader

Yep. Sourceforge started injecting ads and malware into (at least) installers that devs made available on the site.

SorgeForge started injecting adware into binaries distributed via their platform. They had been on a downward trajectory for a while, but after they started doing that they fell of a cliff.

I worked for a company that used the on-prem version of their forge back in the 00s, I remember liking it alot. It felt novel, cool and useful to have fully interlinked bug tracking, version control, documentation, project management and release management.

They started shipping installers with de-facto-malware, but at a time when they were already on a downward slope. It was many years after "sourceforge was the default place to host FOSS".