Skip to content

Comment on GitHub flooded with malware repos spoofing real projects–no response from GitHub

Comments

My suggestion (which I think I shared here for someone that was facing the same problem) is to go the way of bigger open source projects. Create a web site and add a link to the repo for the project. That's how I search for official repos. Either mention from reputable sources, or the project's web page. Not that it's more trustful, but a bit harder to spoof than just create a new repo on GitHub.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.