A secretive network of around 3,000 “ghost” accounts on GitHub has quietly been manipulating pages on the code-hosting website to promote malware and phishing links, according to new research seen by WIRED.
https://www.wired.com/story/github-malware-spreading-network-stargazer-goblin/