GitHub has not removed malicious imitation software after 3 weeks
4 hours ago
- On August 31, a user discovered an imitation of their data wrangling software on GitHub, using the product name and logo without permission.
- The user reported the imitation to GitHub the same day but received only an automated reply.
- A scan of the .dmg file from the repository revealed malware warnings and a changed background image encouraging downloaders to ignore warnings.
- Additional information was reported on September 10, but after 23 days, no response was received from GitHub support.
- GitHub finally removed the offending page about 10 minutes after the story reached the front page of Hacker News.
- The incident highlights that even basic support from GitHub may require public attention on platforms like Hacker News.