Is there a list of confirmed dodgy repos?

The cp<r> article doesn't go into details but it implies what I immediately figured it was: pirated paid Godot plugins and assets, distributed via discord and the like.