They've added a comment explaining what they saw, with the offending URL. It's indeed archive.today itself sending visitors to the malware download site.