GitHub has not removed malicious imitation software after 3 weeks

On the 31st August I got an email from a customer, telling me that they had found an imitation of my data wrangling software on Github. I’m not linking to it, but here is a screenshot:

It is using our product name and logo, without permission. I reported it to Github as an imitation on the same day. I got this reply:

A colleague scanned the Mac .dmg file from the repository using virustotal.com and got a whole load of malware warnings:

Using Isobuster he found out that they have also changed the background image of the .dmg:

The new image encourages downloaders to ignore any warnings about the malware!