Beware: Attackers Manipulating GitHub to Target Developers with Persistent Malware