[edelbitter]

Because we may be missing comments that GitHub has deleted without leaving tombstones (which sucks), it is not entirely clear whether the person creating and responding to the issue I linked is the person trying to have others run that trojan file, or whether they have fallen victim to it .. and merely quoted the link from a now-vanished comment.

In any case, this is the file they referenced, which is still all over GitHub under various "fix.exe" file names in likely LLM-generated issues and issue comments: https://www.virustotal.com/gui/file/d85d164e46fabb085609f258...

[anigbrowl]

It's your comment which is deficient. I happen to know what you're referring to, but this and your GP comment are written as reminders for people who already know what you're talking about, rather than being explanatory for people who don't.

A better approach might have been It seems the usual suspects are still abusing Github pull requests to distribute malware [...]