So their spam detection system isn't as good as at should be. Give them a break. People spreading malware use url shorteners all the time, and I'd bet some automated system just got tripped up here.
(malice -> incompetence etc.)
I'm happy bitly is at least working on spam.