Cybercriminals spotted hiding cryptocurrency mining malware in forked projects on GitHub