While many of these tools are legitimate open-source projects, the phrase is also frequently used as a "hook" by malicious actors. GitHub has recently seen a surge in fake repositories distributing malware under the guise of "verified" or "exclusive" tools.