Yes, I stopped using SourceForge after they started tampering with installers to put adware inside of them.

It's a bit worrying that a sensitive app such as VeraCrypt is still distributed there.

That was 11 years ago, under DHI Group though. I don't think Slashdot Media have been up to the same shady stuff.