... it would be great if someone could check on the various mirrors of PostgreSQL packages on Sourceforge, and make sure that (a) someone from our project still owns them, and (b) they're still offering actual Postgres downloads.
Overall, I would suggest that we probably want to disable all Postgres content mirrors on Sourceforge. We don't really have the spare time to maintain them, and this incident shows that that's a bad situation.