They started shipping installers with de-facto-malware, but at a time when they were already on a downward slope. It was many years after "sourceforge was the default place to host FOSS".