They've added a comment explaining what they saw, with the offending URL. It's indeed archive.today itself sending visitors to the malware download site.

I see that now too!