At least one popular hackintosh item, Clover, is hosted on SourceForge.
SourceForge has started to do bad things to some accounts. Unauthorized ads and adding malware to developer's packages.
Here is a story on Gimp, a graphics tool like a poor-man's Photoshop: http://arstechnica.c...n-malvertising/
Here is the story on Nmap, a utility to map out and perform actions over a network: http://seclists.org/...dev/2015/q2/194