Someone is posing as a fake security company to create malicious GitHub repositories

“An unidentified party has been creating malicious GitHub repositories under the guise of a fake company  that promises exploits for well-known products such as Chrome, Exchange and Discord, but actually infects users who download them.“

Read more:
https://www.scmagazine.com/news/devops/someone-is-posing-as-a-fake-security-company-to-create-malicious-github-repositories