How do I report a malicious repository?

[JamesBucanek]

Select Topic Area

General

Body

I'm the owner of a commercial software product (www.qrecall.com). One of my customers contacted me about a repository they discovered on GitHub that purports to be my product:

https://github.com/QRecall-Mac-Backup-Software/QRecall-Data-Archiving?tab=readme-ov-file

This is definitely not our program and apparently leads to a phishing/malware site.

Is there someone we can contact to have it removed?

Thanks!

[PruthuviDe]

Yes you can report this directly to GitHub for takedown.Use GitHub’s Report abuse or spam reporting form
https://github.com/contact/report-abuse
Choose “Malware or phishing” (and “Impersonation” if relevant), include the repo link and proof of ownership. GitHub Trust & Safety will review and remove it if confirmed.

[queenofcorgis]

Hi @JamesBucanek 👋🏼 We really appreciate you flagging this. The best route to get this to the proper GitHub team is to use our abuse reporting tools. Here's all the info:

• Reporting abuse or spam
• Reporting a user
• Reporting an issue or pull request
• Reporting a repository
• Reporting a comment

You can report behavior and content that violates community guidelines and terms. I am going to close this post, but for this and any future incidents, please refer to those links.

Thank you!