on VirusTotal (https://www.virustotal.com/gui/file/9626c35ca5de5da59ac983efac3572318d327b3a921522c9f80a525b039a0af5/detection), 1 engine of 56 (AegisLab) detected scribus-1.4.8.dmg, showing Trojan.Script.Generic.4!c.
Is this something to be worried about?
scribus-22.214.171.124 came up totally OK (NO engine detected this file); but the installer told me I couldn't use 126.96.36.199, since I'm on macOS 10.13 (at least 10.14 was needed).
Got this from the official download page. 1.5.5 is the last version available for OS X 10.13.