somebody took my repo, reuploaded it with an ai-slopped README, and then added a zip file with lua malware in it??