bloody hell... pulling the binaries for now. nice catch. If it was modified on 10-18 then that coincides with our recent attacks. will put up fresh builds as soon as possible.
the first infected version of zip i have dates back to 11 Oct
in the binaries I pulled it showed a date modified of 10-28, which is well beyond when it was built. Also double checked the checksums of what was up versus what I built and published, no match. pulling github history now.
The original archives I published are still showing up as clean from my drive so this is a recent development. The 10-18 date above was me misreading the date you gave me.