Checkmarx warns of a new attack relying on GitHub search manipulation to deliver malicious code