A set of GitHub-hosted repositories were actively serving malware
securitylab.github.com