A threat campaign has been targeting software developers through GitHub repos that, at first glance, look completely legitimate. Security researchers…