Hackers Compromised 10,000+ GitHub Repositories to Inject Malicious Script