A redditor reported that the source posted contained the malware. Ie: compiling from source would not have saved you (unless you did the diff yourself and inspected the changes).

Yeah they should have moved the repos to an org.

Repo deleted