So today I came across this answer, and I was sort of taken aback. The tool being recommended here has a very long history of being spammed on this site; to date, we have recorded over 90 occurrences of this particular type of spam, usually on questions matching keywords "path too long" or variations of this. It is widely known that the software being recommended here is known malware, and as such, the recommendation is dangerous for users who happen upon it.
I have never heard of this product outside of it being spammed, so I was actually a bit surprised to see it as a recommendation from a legit user with otherwise fine contributions. So I decided to do a little digging:
For the deletion of those folders, see https://github.com/npm/npm/issues/7768, which leads us to [redacted link].
So, as I have to assume good faith on this user's part, it seems plausible that he found the linked issue on github and from the overwhelmingly positive (seemingly) comments about this product over there inferred that it would be worthy to recommend. Now, the problem I have with this is that the vast majority of comments recommending the product are ridiculously spammy. Here is a list of examples from the github issue linked in the problematic answer:
comment by yuliareea, github user joined on the day of the comment, inactive since:
I had this problem for a long time. My friend recommended me [redacted] for fixing this. I am skeptic with this kind of tool but I was wrong. This tool can do anything.
comment by maximjo, github user joined on the day of the comment, inactive since:
I also have faced the same problem and “[redacted]” software sort out my problem easily. Try it, It is easy and very much user friendly.
There are a couple more like this. It seems to me that the company conducting the spam for the product is also targeting github, and the github admins and moderators of this page just did a poor job of catching and nuking it, leading our legit user to be deceived by this.
Now, to my actual question, since I don't know and can't infer the answer to this:
What to do in such a case?
Things I have considered:
Spam Flag: This doesn't seem appropriate because it seems to be a good faith effort to answer, and punishing a user for not noticing source spam with the nuke seems to be harsh. (Especially since a validated spam flag carries a hefty -100 reputation administrative penalty and can lead to a quick Q/A ban)
Moderator Flag: This issue takes more text to explain than would fit into one, the links alone.
Raise on meta: This is what I've done, in deference to the other options being unviable to me
Edit it out: I would, but the entire answer is based around recommending it, so I would be in essence defacing someone's answer
Do nothing: I'm not comfortable with a company getting away with second-hand spam on here.
Ping a moderator in chat and explain: I've been told not to do this.
So what's appropriate here?