GitHub comments abused to push password stealing malware masked as fixes

https://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-password-stealing-malware-masked-as-fixes/