Malware on latest version installer?

[pedrorijo91]

We received a report by @Rohitkrops on on git-scm repo about malware being installed on an user machine: https://github.com/git/git-scm.com/issues/1238

Can you confirm if there's any problem?

@Rohitkrops please provide any info that may help

[peff]

I downloaded by following the link to sourceforge and inspected the result, but I couldn't find anything out of the ordinary in the resulting dmg. The sha1sum of what I got is:

9c8aebb6a3f0eadcd903683c24f307c33f8bb557  git-2.18.0-intel-universal-mavericks.dmg

I wonder if it's something at the browser level (e.g., an ad injecting javascript?).