GitHub has not removed malicious imitation software after 3 weeks
GitHub left a malware-flagged Easy Data Transform imitation online for weeks, removing it after Hacker News attention.
The developer of Easy Data Transform reported on August 31 that a GitHub repository was offering an imitation Mac disk image using the product’s name and logo without permission. A VirusTotal scan produced multiple malware detections, and the disk image’s background instructed users to ignore malware warnings. Additional evidence sent on September 10 received no substantive GitHub response until September 24, when the page was removed about 10 minutes after the complaint reached Hacker News’s front page. The author said likely downloaders were people trying to avoid paying for a license.
- A GitHub repository copied Easy Data Transform’s name and logo.
- VirusTotal flagged the Mac disk image with multiple malware detections.
- Installer artwork told downloaders to ignore malware warnings.
- GitHub removed the page after about 23 days, following Hacker News attention.
- Vendors
- GitHub
- Products
- Easy Data Transform
- Organizations
- GitHub
From the original article
1 min read at successfulsoftware.net
On the 31st August I got an email from a customer, telling me that they had found an imitation of my data wrangling software on Github. I’m not linking to it, but here is a screenshot: It is using our product name and logo, without permission. I reported it to Github as an imitation on the same day.
By hermitcrab · successfulsoftware.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.