&gt; As somebody else mentioned - this is a great honeypot opportunity! By serving malicious builds based on referer and user-agent, they might be able to gather really interesting data.<p>They said the malware used no referer header and changing user-agent. If the user-agent were useful to segment these downloads from others, they most likely would have refused downloads based on that, because by renaming the file like they did, they&#x27;re breaking build scripts for lots of downstream projects.<p>There&#x27;s also the ethical issue of breaking into others machines, even if it&#x27;s &quot;for a good cause&quot;.