I do understand the reason you used that email address and your expectation that your concerns would get to the right people that way. I'm sure that other companies have dedicated people handling their forums, as well. However, we're practically microscopic when it comes to
company size, and we simply don't have the manpower to dedicate anyone to one area of our business. It works far better for us to use a single support email address that can be monitored by the entire team.
I was too busy on the day of the malware incident to look at Twitter or Facebook, so I didn't actually see anything that Arthur posted there. Once the malware was removed, he likely deleted anything he may have posted that was related to the incident, in order to avoid alarming anyone unnecessarily.
To the best of our knowledge, the incident on May 15th was not related to malware. There were issues with forum images and downloads (which you kindly posted about), but those problems were caused by a corrupted table in the underlying database, which I repaired. I monitor the forums daily (including weekends), and the first indication of malware on the site was on May 22nd.
We are aware of Google's process for dealing with these malware warnings, and we are considering how we want to proceed.