Rather worrying when a popular software package site gets hacked like this, they could have easily kept the original site up but just replaced the binary downlo

Rather worrying when a popular software package site gets hacked like this, they could have easily kept the original site up but just replaced the binary download and file hash and nobody would really know.