I wasn't sure which version Ninite were using or if they were aware of the suspicious installer, so I wrote them a mail referencing this thread. They wrote back

I wasn't sure which version Ninite were using or if they were aware of the suspicious installer, so I wrote them a mail referencing this thread. They wrote back a couple hours later (and I'm not even a Pro user!): > Apparently FileZilla has more than one installer package. The discussion in the [HN] forum link is about their "bundled" installer. We use the one without the junk-ware bundled. Below are links to the virustotal results for the packages we use. https://www.virustotal.com/#/file/92aa946d4127eeef30b428e86b54733a0fac2b7b22af9c00707fb827b808303e/detection https://www.virustotal.com/#/file/92aa946d4127eeef30b428e86b... https://www.virustotal.com/#/file/a86a836888e9894215e15da49eb7bcdc6f90bc091df23a54d51a926d63c462b6/detection https://www.virustotal.com/#/file/a86a836888e9894215e15da49e...