There's also a lot of sites that package adware without the developer's consent. See for example the semi-recent Sourceforge controversy: SF approached devs ask

There's also a lot of sites that package adware without the developer's consent. See for example the semi-recent Sourceforge controversy: SF approached devs asking if they'd be interested in using their new download manager that would automatically install third-party 'offers' (unless the user declined the EULA the first 2 times and accepted on the third try). The GIMP team not only declined, but abandoned SF altogether - so now SF's version of GIMP includes adware, and the devs don't see a single dime from it.