Yup. Somebody hacked the repo and lots of servers have been vulnerable for over year. Looks like It's the Sourcforge repo that was spreading the...
Separate names with a comma.