Colleague of mine. Pointed out that github advisory had many new malware reports in last few days. All looking same.

Looks suspicious if you ask me. Maybe somebody hacked the github advisory db?

https://github.com/advisories?page=1&query=type%3Amalware