The PoC Trap: How Fake CVE Repos Became a Researcher Snare

A trojan hidden inside lookalike GitHub exploit code turns the habit of testing new proofs of concept into a credential-theft and remote-control risk.