Microsoft's legal team and GitHub's abuse policies frequently take down these repositories. However, they reappear under new usernames with similar names. By the time a repository is removed, it may have been downloaded tens of thousands of times. The damage—compromised machines, stolen identities, and legal letters—continues long after the takedown.