Provision record
GitHub · GitHub Acceptable Use Policies · View original document ↗

Prohibition on supporting active malware campaigns

Medium confidence Common · 237 of 343 platforms

Key Facts · in the document’s own words

What does GitHub prohibit regarding malware and attacks?
“directly supports unlawful active attack or malware campaigns that are causing technical harms — such as using our platform to deliver malicious executables or as attack infrastructure...”
Version CA-V-006966, captured Sept. 16, 2026 · live source ↗
Our reading, not the document’s words
GitHub prohibits content that directly supports unlawful active attack or malware campaigns that are causing technical harms, such as using the platform to deliver malicious executables or as attack infrastructure.
Stay ahead of the changes
Track GitHub and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

The prohibition requires that the campaign be both unlawful and actively causing technical harms; content that merely relates to such campaigns without directly supporting them may not be covered by this clause.

⚠

Interpretive note: The excerpt is a fragment; the surrounding structure may include additional conditions or qualifiers not visible in the quoted language. The 'such as' phrasing confirms the examples are illustrative, not exhaustive.

Consumer impact (what this means for users)

Generated by a model from the captured document; not read by a person

You are prohibited from hosting content on GitHub that directly supports unlawful active attack or malware campaigns that are causing technical harms.

How other platforms handle this

Character.AI

Don't create or share defamatory or libelous content that could damage someone's reputation or falsely portray them in a harmful way.

ConvertKit

Content that is unoriginal, plagiarized, or copied from another individual or organization.

Synthesia

Using a Stock Avatar to create, offer or sell any non-fungible tokens (NFTs), or incorporating any Stock Avatars therein.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
directly supports unlawful active attack or malware campaigns that are causing technical harms — such as using our platform to deliver malicious executables or as attack infrastructure...

Excerpt from GitHub's Acceptable Use Policies

Provision details

Document information
Document
GitHub Acceptable Use Policies
Entity
GitHub
Tracking information
First captured by ConductAtlas
May 12, 2026
Text quoted from version
CA-V-006966, captured Sept. 16, 2026
Record ID
CA-P-060824
Document ID
CA-D-000790
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006966)
ffd0d6e02c076827157b045c1698ecb0aa7b156513fc6fbfb645520995dccad2
Analysis generated
May 20, 2026 21:06 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006966, captured Sept. 16, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: GitHub
Document: GitHub Acceptable Use Policies
Record ID: CA-P-060824
Version: CA-V-006966
Captured: 2026-09-16 00:42:54 UTC
SHA-256: ffd0d6e02c076827…
URL: https://conductatlas.com/platform/github/github-acceptable-use-policies/provision/CA-P-060824/prohibition-on-supporting-active-malware-campaigns/
Accessed: Oct. 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does GitHub's Prohibition on supporting active malware campaigns clause do?

The prohibition requires that the campaign be both unlawful and actively causing technical harms; content that merely relates to such campaigns without directly supporting them may not be covered by this clause.

How does this clause affect you?

You are prohibited from hosting content on GitHub that directly supports unlawful active attack or malware campaigns that are causing technical harms.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 237 platforms. See the full comparison.

Is ConductAtlas affiliated with GitHub?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.