Stealthily introducing malware to your repositories (and distributing it on npm) is A-OK, absolutely no action taken when it happened last year with node-ipc, s

Stealthily introducing malware to your repositories (and distributing it on npm) is A-OK, absolutely no action taken when it happened last year with node-ipc, so I'm really curious to see what the rationale was in this case, for it doesn't get much worse than that. Some more fraudulent accusations of code theft? I don't buy it from the Copilot company, and the mods/racism allegations couldn't possibly be it, it'd make GH look irresponsible and definitely not a trustworthy place to host any project on.