On the 31st August I got an email from a customer, telling me that they had established an imitation of my data wrangling software on Github. I’m not linking to it, but current is a screenshot:
It is using our merchandise name and logo, without permission. I reported it to Github as an imitation on the identical day. I got this reply:
A coworker scanned the Mac .dmg document from the repository using virustotal.com and got a entire burden of malware warnings:
Using Isobuster he established out that they have additionally changed the backdrop depiction of the .dmg:
The new depiction encourages downloaders to disregard any warnings concerning the malware!
I reported this additional data on the 10th September.
As of the 23rd September, I have had no reply from Github assistance beyond the first automated email. 23 days without a reponse. This is pisspoor. Do improved Github.
I’m not certain what my next row of assault is. A DCMA takedown petition to Github?
Realistically the lone group apt to download the .dmg are those trying to evade paying for a licence for Easy Data Transform. I don’t have a huge amount of sympathy for them if they get their computers compromised. But I really don’t akin bad guys taking advantage of my difficult work.
Ps/ Always download application from the vendor, anywhere possible.
** Update 24-Sep-2026 **
Github eventually took the offending leaf downward about 10 minutes following this article appeared on the forefront leaf of Hacker News. Total coincidence. I’m sure!
Moral of the story. If you desire equal the most essential flat of assistance from Github, you need to get on the forefront leaf of Hacker News.
And it seems they are capable to do things extremely quickly, whenever they desire to.
.png)
