Webrat, disguised as exploits, is spreading via GitHub repositories