Classic Shell download mirror compromised

I somehow missed that it was already submitted (I even checked new!) https://news.ycombinator.com/item?id=12215449