I'm not sure you submitted the actual artefact? Would be interested in knowing, though.

If you copy the url at the top and resolve it, it downloads the bin. But i think this may be a false alarm and the botnet just spread his malware over github.