diff --git a/2026/08/2026-08-19-zipminator.md b/2026/08/2026-08-19-zipminator.md new file mode 100644 index 0000000000..2666efe126 --- /dev/null +++ b/2026/08/2026-08-19-zipminator.md @@ -0,0 +1,54 @@ +Before disabling any content in relation to this takedown notice, GitHub +- contacted the owners of some or all of the affected repositories to give them an opportunity to [make changes](https://docs.github.com/en/github/site-policy/dmca-takedown-policy#a-how-does-this-actually-work). +- provided information on how to [submit a DMCA Counter Notice](https://docs.github.com/en/articles/guide-to-submitting-a-dmca-counter-notice). + +To learn about when and why GitHub may process some notices this way, please visit our [README](https://github.com/github/dmca/blob/master/README.md#anatomy-of-a-takedown-notice). + +--- + +Hi, + +The reported repository (https://github.com/CYBERELLUM/zipminator-pqc) is not in compliance with the +Apache License 2.0 for the following reasons: + +1. LICENSE FILE REMOVED: The original Apache-2.0 license file was removed. The infringing repository +shows license type "Other" instead of Apache-2.0. Apache License 2.0, Section 4(a) requires: "You must +give any other recipients of the Work or Derivative Works a copy of this License." + +2. COPYRIGHT NOTICES REMOVED: All copyright headers and attribution to the original author ([private] / QDaria AS) were removed. Section 4(c) requires: "You must retain, in the Source form of any + Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices." + +3. NO MODIFICATION NOTICES: The repository was republished without any notices indicating it was copied + from the original. Section 4(b) requires: "You must cause any modified files to carry prominent +notices stating that You changed the files." + +4. NOTICE FILE NOT INCLUDED: Section 4(d) requires inclusion of the NOTICE file, which was not +included. + +To bring the project into compliance, the infringer would need to: +- Restore the Apache-2.0 license file +- Add clear attribution to the original author ([private]) and original repository +(https://github.com/QDaria/zipminator) +- Add prominent notices on all files indicating they were copied +- Include the original NOTICE file + +However, I request full removal rather than compliance because: (a) the infringer demonstrated +deliberate bad faith by stripping the license and all attribution, (b) the repository exposes code +related to a pending patent application ([private] Patent Office application [private], filed March 24, +2026), and (c) this appears to be part of a systematic pattern — the CYBERELLUM account has 129 +repositories, dozens created in bulk on the same dates (October 3, 2025 and January 17, 2026), many +appearing to be copies of other open-source projects. + +The git commit history in the infringing repository contains [private] [private] ("[private]", "[private]") and [private] +[private] [private] as the author of every commit, which constitutes direct evidence of copying. + +I have a good faith belief that use of the copyrighted materials described above on the infringing web +pages is not authorized by the copyright owner, or its agent, or the law. I have taken fair use into +consideration. + +I swear, under penalty of perjury, that the information in this notification is accurate and that I am +the copyright owner, or am authorized to act on behalf of the owner, of an exclusive right that is +allegedly infringed. + +[private] +[private]