Given the trajectory of the SourceForge site, do you really find the story suspicious?
SourceForge went from showing deceptive ads with a big Download button, then started bundling a malware installer with any projects that wished to opt-in to their revenue sharing scheme.
Is it really hard to believe that they'd start bundling that same installer with "abandoned" projects? Plenty of other news sites seemed quite able to post about the story without finding it super suspicious, or requiring so much research to verify the story.
Face it, the reason that the story didn't immediately come up on Slashdot is because the site is owned by Dice. That is the reason for the suspicion you have, and the need for the editors to be cautious about posting the story.
The caution by the editors in this case is understandable and expected; just as the anger of the user base is also understandable and expected. No point in anyone pretending otherwise.