GitHub says that when other users would download any of the 26 projects, the malware would behave like a self-spreading virus and infect their local computers.