GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

They do so by seeding legitimate but vulnerable websites with malicious JavaScript. Upon loading, the code presents users with convincing browser update notifications, masking dangerous payloads.