Microsoft admits GitHub used to store malware that infected almost a million devices