GhostAction operators add GitHub-themed phishing and a VS Code-triggered stealer to compromised repositories, with 94 ...