In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
The big picture: People have grumbled about Windows telemetry for years, to the point that an entire cottage industry of tools that clean up the OS now exists just to strip the tracking bits out.