It's free and open-source.

and hosted on github

I would think that'd be exactly the sort of thing which is explicitly prohibited from github/lab/etc

It is, but it's like one of those situations where they won't report a thief to the police until he's stolen enough to make it a felony.

> and it comes with free malware!

So where is the contradiction?

Probably that one of the original comments on this thread suggested using another free and open source thing instead of using this free and open source thing? Why is linux exempt from "it comes with free malware" and not this other widely trusted and used tool?

Linux is more trusted because there are legions of cybersecurity experts who made their bones combing through the linux codebase to find security exploits. Even if this is open source, how can I be sure someone has audited it?

Alternatively I could pay what is, for me, a pittance, and know that my OS is not compromised.