See my other comment though, it seems like the injection is performed by archive.ph itself. I tried to archive simply my own blog (a very simple page without any JS) and the script gets injected there as well.

So it might just be a coincidence that mitchbob happens to be the one who posted a link where that script gets noticed. It's hard to know for sure of course.

I've seen it and only flagged posts with [comments by the same author with links to] malicious content. It doesn't matter whether user is affiliated with this content's host or phishing campaign since this is most of his HN activity. This should stop even if is unintentional.

If you think someone's doing something wrong, email the mods. You can't be starting some innuendo campaign and vote brigading against some user just because you have a bad feeling about their posts, that's in the guidelines.

I've flagged malicious content and don't consider this brigading. When I saw that this isn't a problem with a single account, I made a Tell HN[1] 20 minutes ago to tell both mods and the community to exercise caution.

[1] https://news.ycombinator.com/item?id=30670319

Again, if you think someone is doing something wrong, do what the guidelines tell you and email the mods. Same goes for voting stuff. Tell HN doesn't tell the mods anything, they don't see every post and comment.

archive.is and its variants have been a popular way to link to archived articles on HN, and elsewhere, for years now.

There's no reason to believe that mitchbob was doing anything other than trying to be helpful to users. Tons of legit HN users do that. Let's not pick on one to make a witch out of.