GitHub has not removed malicious imitation software after 3 weeks
GitHub has not removed malicious imitation software after 3 weeks
GitHub 在三周后仍未删除恶意仿冒软件
On the 31st August I got an email from a customer, telling me that they had found an imitation of my data wrangling software on Github. I’m not linking to it, but here is a screenshot: It is using our product name and logo, without permission. I reported it to Github as an imitation on the same day. 8 月 31 日，我收到了一位客户的电子邮件，告知他们在 GitHub 上发现了我数据处理软件的仿冒品。我不会提供链接，但这里有一张截图：它未经许可使用了我们的产品名称和徽标。我当天就以“仿冒”为由向 GitHub 进行了举报。
I got this reply: A colleague scanned the Mac .dmg file from the repository using virustotal.com and got a whole load of malware warnings: Using Isobuster he found out that they have also changed the background image of the .dmg: The new image encourages downloaders to ignore any warnings about the malware! I reported this additional information on the 10th September. 我收到了这样的回复：一位同事使用 virustotal.com 对存储库中的 Mac .dmg 文件进行了扫描，结果收到了大量的恶意软件警告：通过使用 Isobuster，他发现对方还更改了 .dmg 的背景图像：新图像诱导下载者忽略有关恶意软件的任何警告！我在 9 月 10 日补充报告了这些信息。
As of the 23rd September, I have had no response from Github support beyond the original automated email. 23 days without a reponse. This is pisspoor. Do better Github. I’m not sure what my next line of attack is. A DCMA takedown request to Github? 截至 9 月 23 日，除了最初的自动回复邮件外，我没有收到 GitHub 支持团队的任何回应。23 天没有回应。这太糟糕了。GitHub，请做得更好。我不确定下一步该怎么办。向 GitHub 发送 DMCA 下架请求吗？
Realistically the only people likely to download the .dmg are those trying to avoid paying for a license for Easy Data Transform. I don’t have a huge amount of sympathy for them if they get their computers compromised. But I really don’t like bad guys taking advantage of my hard work. Ps/ Always download software from the vendor, where possible. 现实地说，会下载该 .dmg 文件的唯一群体，就是那些试图逃避支付 Easy Data Transform 许可费用的人。如果他们的电脑因此被入侵，我并不会有太多的同情心。但我确实非常反感坏人利用我的劳动成果。附注：请尽可能始终从供应商处下载软件。
** Update 24-Sep-2026 ** Github finally took the offending page down approximately 10 minutes after this post appeared on the front page of Hacker News. Total coincidence. I’m sure! Moral of the story. If you want even the most basic level of support from Github, you need to get on the front page of Hacker News. And it seems they are able to do things very quickly, when they want to. ** 更新 2026 年 9 月 24 日 ** 在这篇文章出现在 Hacker News 头条大约 10 分钟后，GitHub 终于删除了违规页面。纯属巧合，我敢肯定！这个故事的寓意是：如果你想从 GitHub 获得哪怕最基本的支持，你需要登上 Hacker News 的头条。看起来只要他们想，他们处理问题的速度还是很快的。
Comments / 评论
looks like GH has actioned on it! Reply ↓ 10 minutes after it made the front page of HN. What a massive coincidence… Reply ↓ 看起来 GitHub 已经采取行动了！回复 ↓ 在它登上 HN 头条 10 分钟后。真是个巨大的巧合…… 回复 ↓
The same thing happened to us. We reported the issue to GitHub back in June. An acknowledgement arrived immediately but we haven’t had a peep since then. Thankfully the folks at TinyURL moved quickly to disarm the virus-ridden download and protect our users. I’m very disappointed in GitHub. It should take all of 5 seconds to determine that the site is fraudulent. Yet it remains up, causing confusion for customers searching for our product in Google (it’s link #2). Maybe GitHub doesn’t care? Reply ↓ 同样的事情也发生在我们身上。我们早在 6 月就向 GitHub 报告了这个问题。虽然立即收到了确认回执，但此后就再也没有音讯了。幸运的是，TinyURL 的工作人员迅速采取行动，解除了带有病毒的下载链接并保护了我们的用户。我对 GitHub 非常失望。确定该网站是欺诈性的只需 5 秒钟。然而它依然存在，导致在 Google 搜索我们产品的客户感到困惑（它是搜索结果的第 2 条）。也许 GitHub 根本不在乎？回复 ↓
They seem to care if you get front page of Hacker News! Perhaps you should try a DCMA takedown request? Reply ↓ 他们似乎只在乎你是否上了 Hacker News 的头条！也许你应该尝试发送一份 DMCA 下架请求？回复 ↓
Ah, I found this and wrote about it months ago. Very upsetting to see nothing has changed. https://brennan.day/the-curious-case-of-the-triton-malware-fork/ Reply ↓ 啊，我几个月前就发现了这一点并写过相关文章。看到一切都没有改变，真是令人沮丧。https://brennan.day/the-curious-case-of-the-triton-malware-fork/ 回复 ↓