Thousands of repositories on GitHub are distributing malware, accessible through the site's standard search function. These malicious repositories have persisted for at least two years, despite GitHub's significant resources, including a dedicated security team and AI capabilities. An analysis of these repositories revealed common patterns, such as specific headings with emojis, which can be used to find more instances.

Refined search queries on GitHub, focusing on readme files and links to zip archives, helped filter results. Further refinement using regular expressions to identify specific archive naming conventions proved more effective. A script developed to find these repositories identified 10,000 malicious instances, which GitHub subsequently deleted.

However, the author notes that new repositories quickly appeared, and GitHub took no further action for a month. This suggests GitHub is aware of the malware distribution scheme but is failing to proactively address it. The author questions why a company of Microsoft's size and resources has not implemented a more robust solution, speculating about internal decision-making processes or bureaucratic hurdles.