Report to chrome's safe browsing database too, and put a disclaimer banner at the top of the readme / repo's About section, saying something like "We only publish binaries on this repo's GitHub Releases section. All other sources are unofficial and potentially unsafe."