Instead of downloading the plugin files, Spartacus takes HTML code (I think a copy of https://sourceforge.net/projects/php-blog/) and writes it as files content. This happens only when Sourceforge is set as files mirror, for File/Mirror location (files).
A hit serendipity blog would then show that Sourceforge page when visiting the serendipity backend,
Removing Sourceforge as mirror option will avoid this bug in the future.