A PSA for anybody who uses SourceForge still - I recently read that they've rolled out something called "DevShare", which is basically something that projects can opt into to have their downloads bundled with adware, monetising the download for the project owners.
I used to trust SourceForge downloads. I won't be able to do so any more. :(
(more information: reddit, article)