Then created a GitHub account to post three separate issues complaining about how the project’s executable is an obvious Trojan, patting themself on the back for keeping the community safe with their expert sleuthing.