JDownloader confirms a security breach where hackers manipulated official download links to distribute malicious files between 6 and 7 May 2026.