> Presumably they would know which account was used to sign in and upload the malicious code, and that account would be tied to things like an email address an

> Presumably they would know which account was used to sign in and upload the malicious code, and that account would be tied to things like an email address and IP address which could be traced back to a person. Anonymous email services and VPNs exist.