There were several cases where people started claiming that they ported the Netplus mod to 2.2.9 and sending malicious executable files in Discord channels and DMs.
To combat this, I've quickly ported it to 2.2.9 myself. It's very-very buggy, it crashes, but it works!
UPDATE: Ported to 2.2.10!
To make sure that the source code is not malicious and trusted, I run a separate repository for it with commit signature verification process to prove that a specific code change comes from the original author and trusted source. It also gives you and other people the ability to ensure that no one can modify verified commits. In other words, the code change you see is really what the author wrote (i.e. it’s not been tampered with).
https://git.do.srb2.org/JohnFrostFox/netplus
There are no binary releases (read Windows "exe"s) as of yet, they'll be released once the mod gets more stable.
Remember to not to download and run exes from random people!
If source code is provided, it's safer to build the "exe" yourself. Consider running a virus scan, checking the properties and details of files before you run them. If you can, you may test them in sandbox environments such as isolated virtual machines. Report fakes to SRB2 staff in forums or Discord.