> The term "malicious" does imply a little more to me though, like it's actually serving me altered software.

Just because it doesn’t today doesn’t mean it won’t tomorrow. Be “legit”, get links to your site, rise in the SEO ranks. Then maliciously alter the software.