Hackers compromised FOSSHub, a popular file hosting service, and replaced the legitimate installer of several applications with malicious copies.
Note that some software projects such as Classic Shell, qBittorrent, Audacity, MKVToolNix, and others use as their primary file download service.
Users who downloaded Classic Shell and Audacity software packages from FOSSHub in the first week of August 2016, were affected by Fosshub breach.
Attackers compromised the publishing infrastructure.