I found 10k GitHub repositories distributing Trojan malware

A security researcher discovered approximately 10,000 malicious GitHub repositories that distribute Trojan malware by copying legitimate projects and adding links to infected zip files in their readme files. The repositories follow a distinct pattern—they regularly delete and re-push commits containing only malware download links—which allowed the researcher to create a script to identify them systematically. GitHub took over a month to respond and remove the initially reported repositories, highlighting a significant gap in the platform's malware detection and response capabilities.