Downloading unsigned DMGs from third parties is how ransomware happens. Stick to softwareupdate or Apple’s support page for older installers.