GITHUB COMMENTS ABUSED TO PUSH MALWARE VIA MICROSOFT REPO URLS

Summary from the TLDR Web Dev newsletter

GitHub's comment file upload feature is being used to distribute malware disguised as legitimate files from trusted Microsoft repositories.