&quot;Since the content they host is open-source, this is technically legal, but it&#x27;s scummy as all hell.&quot;<p>If the project is licensed under GPLv3 (or any other strong copyleft license), wouldn&#x27;t they be illegally hosting it because they are bundling their malware dropper with software that isn&#x27;t compatible with the license?