The software itself wasn’t compromised. But the download link was. So if you downloaded it in the last year, you downloaded state sponsored malware.