I hunt phishing and malware across the web and get it taken down: phishing sites, malicious packages and apps, and malicious code on GitHub. I run the response end to end: finding it, filing the takedown with the right host, registrar or platform, and tracking it until it's gone. When the code turns up in a hijacked developer's repository, I warn the owner and help them clean up.
On GitHub, since June 2026 I've reported 732 accounts to GitHub Trust and Safety, and scoped the fake-font loader campaign (Contagious Interview / PolinRider) to more than 12,000 live repositories under about 3,000 owners. Results: public dashboard
By day I'm a Senior System Operations Engineer behind most of Wisconsin's bulk electric grid, 19 years and counting.