FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware