I have no idea - I've never used them before. I imagine if you've already got it installed, it's not an issue for you.

I don't think their product is affected, just what gets installed is <nasty>.

Do you mind posting the sha256sum for the zip file you downloaded? Then when someone from lastpass comes along they could at least compare it with their upstream.

I just downloaded:

0778d4528381917a8beaebfa3c033cc81157439fae01c082e8e7f33b51e37340 lpmacosx.zip

Looks the same for me.

+1