Multiple sourceforge servers were compromised, so treat anything in there as compromised (including files you download, etc).
Info: http://sourceforge.net/apps/wordpress/sourceforge/2011/01/27/sourceforge-net-attack-update/
http://blog.sucuri.net/2011/01/sourceforge-net-servers-compromised.html
http://developers.slashdot.org/story/11/01/27/2059200/SourceForge-Down-After-Attack-Updated