[Jimmc414]

> If 1,000+ malicious repos can persist for months

3 years unfortunately

https://github.com/Jalynn0922/steal-cook

[andrewchilds]

I mean, do a search for "steal cookie": https://github.com/search?q=steal+cookie&type=repositories

This one has been up for two years: https://github.com/Aker490/Steal-Cookie-Roblox

It would be good to hear an official response from GitHub on where the boundaries are, since it seems like there's plenty of examples of clearly malicious repos hosted for years.