Main target of the takedown was the youtube-dl project, a Python library that had amassed more than 72k stars on GitHub and was used in many YouTube video ripping tools and services.

Cybercriminals exploit YouTube and GitHub to distribute crypto malware through hijacked accounts, fake repositories and malicious links disguised as legitimate content.