A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...