I assure you, I didn't miss click an ad. I've got µblock origins, NoScript and PiHole running. I also don't trust that the average user would even know if they got hit. Then there are people that get hit, but nothing happens, because the server the script is calling home to is no longer reachable. There has been a few instances of RPG extractor, Ren'py extractor, applocal, and Nguyen OCR getting packed in or shared around on F95, and they're modified versions. The good and the virused applocal both trip virus scanners, so it's hard to tell which is which until you run the program and see something pop up in glasswire that shouldn't be there.
I'm not saying THIS specific file is bad. I was, if you recall, replying to a user who'd said you shouldn't be on F95 if you don't implicitly trust every user, and every first page download.
I found that to be a wrongheaded statement.