I'm late to this, but we can do without this kind of comment on Hacker News, as it falls under the guidelines about generic tangents and tangential annoyances. It led to a hostile exchange down-thread, which is exactly the kind of thing we're trying to avoid here, but is what happens when people take threads away from the main topic.

https://news.ycombinator.com/newsguidelines.html

Given we're a technology-focused site, Hacker News readers can be reasonably assumed to be technically proficient, and aware of the importance of taking normal security measures.

You sure wouldn't want them spying on you, stealing your data, chewing up your resources for shady profit schemes, or making your machine unbootable. Better to leave that to the experts at Microsoft and FAANG since all those features come preinstalled nowadays.

Snark aside, given the context, this really seems like a baseless attack on independent open source developers, who represent a significant potion of this site's subject matter and target audience. Genuine question: why do you feel that this warning is appropriate here but not the dozens of other solo github projects that make it to the HN front page every week?

Microsoft Defender didn't find anything

But BonzaiBuddy is your friend.