Threat actors known as ‘Stargazer Goblin’ have created a malware Distribution-as-a-Service (DaaS) from over 3,000 fake accounts on GitHub that push information-stealing malware. […]
from https://www.bleepingcomputer.com/news/security/over-3-000-github-accounts-used-by-malware-distribution-service/