Although I'm not sure, this [1] could be the reason. TLDR: A chinese hacker group took the official exe, added a malicious dll in it and distributed it to NGOs and government institutions, most likely through a clone website or phishing email. Purpose was said to be espionage.

[EDIT]

Ofcourse the Indian media reported that the official VideoLAN org was controlled by the said hacker group which leveraged it's position to distribute malware.

[1] https://www.bleepingcomputer.com/news/security/chinese-hacke...