A Github repository is basically a folder designed to store files. It is also available online for anyone to download, access, and contribute to the files/code within the folder.

Ethereum smart contracts used to hide URL to secondary malware payloads in an attack chain triggered by a malicious GitHub ...

A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.

GitHub abused to distribute payloads on behalf of malware-as-a-service The repository offered the MaaS a distribution channel not blocked in many networks.