Seemingly innocuous repositories contain malicious elements that download more malware and steal information. The attack appears successful with some 5 Bitcoin being stolen using this attack method.