[rwth-security] GitHub comments abused to spread Lumma Stealer malware as fake fixes