IP and friends compromised in the agentic Internet

Couldn't GitHub detect a Shai-Hulud exfil repo being created and just... block it? Given that it's a worm, the attacker wouldn't be able to play couch co-op. You know with all this AGI swirling around nowadays that is stronger than nation state hackers you think one of these systems because I want to be able to play the original game.