I found 10k GitHub repositories distributing Trojan malware

June 18, 2026 · Orchid Files

URL: https://orchidfiles.com/github-repositories-distributing-malware/

“There are 10,000 repositories that exactly matched the pattern. That’s 25% of the total.”

One person with a script found 10,000 malware repos following the same obvious pattern. GitHub was told and did nothing. Microsoft owns GitHub and burns billions on AI, but cannot run a regex against its own platform. The malware stays up because removing it costs money and ignoring it costs nothing.