Malware Pack Github -

A repo named “Ransomware-Builder-3.0” (now deleted) had 1.2k stars and many positive comments. All comments were from bot accounts. The “builder” was actually an infostealer that uploaded the user’s browser cookies and SSH keys to a remote server.