High-profile projects actually can&#x27;t stop.  If you attempt to stop using Sourceforge, they will consider your account &quot;abandoned&quot; and continue mirroring the new site and serving downloads with their malware dropper included.  So if you want to keep the malware out of your releases, you need to maintain control of your project by keeping SourceForge up to date.<p>The GIMP project learned this the hard way:  <a href="http:&#x2F;&#x2F;www.gimp.org&#x2F;news&#x2F;2015&#x2F;05&#x2F;27&#x2F;gimp-projects-official-statement-on-sourceforges-actions&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.gimp.org&#x2F;news&#x2F;2015&#x2F;05&#x2F;27&#x2F;gimp-projects-official-s...</a><p>Since they used to be the official source, their repository tend to have very high PageRank and they&#x27;re essentially cashing in on it.  Since the content they host is open-source, this is technically legal, but it&#x27;s scummy as all hell.