<story><title>Topic: Discord Stealer</title><url>https://github.com/topics/discord-stealer</url></story><parent_chain><item><author>DrawTR</author><text>Interesting how malware is essentially allowed on GitHub, seeing as the top result here has ~500 stars and has features advertised to steal much more than Discord accounts. I have a recollection of downloading a program from GitHub (which has 1.4k stars right now) whose installer had an opt-out malware bundled -- I reported the repo three times, and they didn&amp;#x27;t take &lt;i&gt;any&lt;/i&gt; action. Chocolatey team did step in and remove it on their platform, but I wonder why GitHub didn&amp;#x27;t take any action</text></item></parent_chain><comment><author>creatonez</author><text>I would differentiate &amp;#x27;malware implementations&amp;#x27; from &amp;#x27;malware&amp;#x27;. A hacking tool presented with its harmful features at face value, with adequate warnings, is not quite the same as an attempt at tricking people into downloading or bundling something dangerous. I believe Github makes the same distinction in allowing hacking tools. They also allow byte-reversed or zip-encrypted copies of well-known malware for the purpose of study. There&amp;#x27;s no way to keep out the bad guys while still allowing security researchers.</text></comment>
<story><title>Topic: Discord Stealer</title><url>https://github.com/topics/discord-stealer</url></story><parent_chain><item><author>DrawTR</author><text>Interesting how malware is essentially allowed on GitHub, seeing as the top result here has ~500 stars and has features advertised to steal much more than Discord accounts. I have a recollection of downloading a program from GitHub (which has 1.4k stars right now) whose installer had an opt-out malware bundled -- I reported the repo three times, and they didn&amp;#x27;t take &lt;i&gt;any&lt;/i&gt; action. Chocolatey team did step in and remove it on their platform, but I wonder why GitHub didn&amp;#x27;t take any action</text></item></parent_chain><comment><author>jrm4</author><text>I&amp;#x27;m glad they don&amp;#x27;t?&lt;p&gt;That&amp;#x27;s one of the perks of free&amp;#x2F;open source.&lt;p&gt;Presuming there exists something like a provider&amp;#x2F;customer  relationship for users of Discord, it&amp;#x27;s now Discord&amp;#x27;s job to step up and fix it; unfortunately &lt;i&gt;years&lt;/i&gt; of Microsoft getting away with horrible security has cemented in our collective heads that &amp;quot;malware&amp;quot; is some abstract thing that, you know, just happens.</text></comment>