A Kaspersky report from Monday warned users of a “GitVenom” campaign that’s been active for at least two years but is steadily on the rise. The attack starts with seemingly legitimate GitHub projects ...