Sourceforge uses old gimp-win account to spread malware through custom installer · HackerTrans