You probably missed this part at the end:

PPS: Sourceforge now claims they will stop trojaning software without the developer's permission, but they've broken that exact promise before.