Yeah a dude I know got hacked by downloading some random github program, the hacker even started taunting him via discord lol.

But I downloaded plenty of shit from github, like prusaslicer, my 3d printer's firmware and plugins for octoprint. Always stuff that is verified via another page though. Almost never stuff that comes up during a random search, and if I do, I look it up first to see if it's safe.