GitHub actively scans for malware, but archives of old RATs like Spynote 6.4 regularly slip through the cracks. Here is what you are actually downloading when you find a repository claiming to offer "Spynote 6.4":