We could make an open source database. Then very simple browser extension to place a very prominent warning on any GitHub repo page that happens to be suspected

We could make an open source database. Then very simple browser extension to place a very prominent warning on any GitHub repo page that happens to be suspected malware. I guess the problem is that only helps those who already know they need to watch out for this sort of thing, not the users most likely to be pwned.