User d3k4y on reddit has reported that the Sourceforge version of pywallet contains malicious code that will send users private keys to a remote server located at bieber.atwebpages.com (source, archived). Once a well-known source for a variety of software downloads, the site has steadily declined into a haven for malware and other assorted junk. This incident serves as a reminder of the importance of always verifying checksums of any software before attempting to run it in a live environment.