> Blacklisting SourceForge in your hosts file might be up there, if they are still bundling crapware with the few legitimate downloads that haven't moved elsewhere.

ublock origin has a "Badware risks" filter list with sourceforge in it.