“releases” on a GitHub repository containing no code

Probably because the attack vector is having a user account on the target

We just have to normalize something worse sounding for installing apps from the play store. “I can’t believe you sloploaded Signal after I told you about Molly!”