Even people on the GitHub of the tool itself say that one of the versions is downloaded with a trojan.