GitHub repositories are being infected with malwareTrusted repositories can bypass secure web gatewaysGitHub comments are also being used to hide malicious filesPhishing campaign leverages trusted GitHub repositories to distribute malware