How to protect yourself from phishing and malware on GitHub and GitLab

Can you catch malware by downloading files from Microsoft’s repositories on GitHub? Turns out, you can. Stay alert!