Re:I found 1000 GitHub repos with malware. Can we get them d...
by dcow on Friday February 28, 2025 @10:42AM
(#43206849)
At least the malware is exposed in the light of day. I didn't say don’t fix something. I asked whether the malware should be removed vs e.g. being flagged by github. If github removes it, it will move somewhere else and be harder to keep a thumb on. That’s fine, I was curious because this “research” wouldn’t have happened in the first place if the malware was elsewhere. It sounds like intent here matters…
[ Parent
| on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d...
by Aurornis on Friday February 28, 2025 @11:18AM
(#43207332)
> If github removes it, it will move somewhere else and be harder to keep a thumb on.
It’s on GitHub for visibility and credibility to victims.
If it moves somewhere else where victims can find it, the researchers can find it too.