On the thirty first August I bought an e-mail from a buyer, telling me that they’d discovered an imitation of my information wrangling software program on Github. I’m not linking to it, however here’s a screenshot:
It’s utilizing our product identify and brand, with out permission. I reported it to Github as an imitation on the identical day. I bought this reply:
A colleague scanned the Mac .dmg file from the repository utilizing virustotal.com and bought a complete load of malware warnings:
Utilizing Isobuster he came upon that they’ve additionally modified the background picture of the .dmg:
The brand new picture encourages downloaders to disregard any warnings in regards to the malware!
I reported this extra info on the tenth September.
As of the twenty third September, I’ve had no response from Github assist past the unique automated e-mail. 23 days and not using a reponse. That is pisspoor. Do higher Github.
I’m unsure what my subsequent line of assault is. A DCMA takedown request to Github?
Realistically the one individuals prone to obtain the .dmg are these attempting to keep away from paying for a license for Simple Information Remodel. I don’t have an enormous quantity of sympathy for them in the event that they get their computer systems compromised. However I actually don’t like dangerous guys benefiting from my laborious work.
Ps/ At all times obtain software program from the seller, the place potential.
