A 'normal consumer' won't be helped by such a technical list on github/gitlab. Do you really believe they would look there? If they wanted protection they could have installed Ad-blockers etc. long time ago already. (Or use more reputable shops)
Not all, but some non-tech people do that.. And lots of webshop owners google their own shop. Shaming sites that are hosting malware seems perfectly reasonable.
On topic: I assume github/gitlab both completely misunderstood what is going on, and thought this was a disclosure of security holes that could be exploited. I wouldn't be surprised if they do a lot of these.
Perhaps try to throw it up on a few different CDNs where you pay for the service and can contact support. Like S3 or dreamhost (they have decent support too). Arguably github/gitlab isn't the best hosting platform for misunderstood journalists.
as was noted, 600 sites have already cleaned up their act
> Update Oct 14: 631 stores have been fixed, good work everybody!
So is it really as useless as you claim?
The 631 stores have likely been fixed b/c of the publicity (thanks to kicking the list out;)
I think I just don't like when this shame & name business happens on github/gitlab servers. Somewhere else, it's fine.
What about "technical" users?