Today I encountered a user who has asked two questions, the second of which was deleted.
The second question was a code dump of obfuscated Python code with a vague debugging request. After the fact, I de-obfuscated the code and determined that it did indeed have malicious intent. Specifically, it seemed intended to download and run a bootstrap .bat from a GitHub repository, which would then download and run other executables from that directory after first attempting (in a way that I don't think would have worked) to obtain root privileges.
The question would likely have been downvoted and closed even without any sign of obfuscated or malicious code, because it was "noisy" (ranting about money paid for the code) and vague about the problem. However, it got me curious.
I looked into the user and found one other question. It was asking (in an obviously too-broad way) how to use Python to download and automatically execute files. I voted to delete that (since then, it has also successfully been deleted), and also raised a custom flag to point out the pattern of behaviour and suggest a ban.
The flag was declined.
Does the site tolerate the presence of users who clearly only want help with being "script kiddies"? How should I handle such cases in the future?