The second article suggests GitHub has a similar problem and the first says that SourceForge has an opt-in policy. I can obviously understand people wanting to boycott SF but no-one is talking about avoiding GH downloads. Did I miss an element of this story?
I guess the main difference is that it is SF themselves that add some of the crapware in binaries distributed by them. As far as I know, Github have never done that.
That people may upload malware to their github repo is quite different.
As others have pointed out, SourceForge has become a malware distribution network.
I haven't seen evidence of malware, just adware wrappers from sourceforge. It's a small, but important, difference.
Depends on your definition of malware I guess.
It's hard to see exactly what SourceForge are offering because apparently they do VM detection and their installer is much better behaved when running in a VM, and most folks don't have a spare physical machine they can test it on and wipe afterwards. Which I think says a lot about how malicious their installers actually are.