I don't know who is building them but I grabbed the one from Mega and scanned it and there is no virus so it definitely seems like a case of the other free hosting sites adding them in. That sort of thing happens all the time and has been happening for years. Like I was saying there is absolutely no point in using anything but Mega (unless they have added restrictions since the last time I checked). I edited in a warning in the top post.