Malware-Laced GitHub Repos Found Masquerading as Developer Tools