No we do not. When my company acquired SourceForge in 2016 the first thing we did was eliminate bundled adware installers. We now scan all projects for malware as well, have https downloads, and more. Big redesign coming soon too. Ars: https://arstechnica.com/information-technology/2016/06/under...

Reddit AMA: https://www.reddit.com/r/sysadmin/comments/4n3e1s/the_state_...

I have no idea. Once they made their first attempt on me, I stayed away for good.

No. And everything is scanned for Malware too.