As of late there has been new Malware detected that hides in Xcode projects and infects your machine when buidling said project/code. It does many things, get login credentials for one, and is not something to think light about. Affected projects are found on Github and there's no telling which is infected and which is not, it could be even one of Paul's projects!

To me, this makes using/trying projects from Github or any other source a no go at the moment, how do you guys handle this?

MacRumours article on the Malware

Much longer article on ZDNet

"The method of distribution used can only be described as clever," Trend Micro says. "Affected developers will unwittingly distribute the malicious Trojan to their users in the form of the compromised Xcode projects, and methods to verify the distributed file (such as checking hashes) would not help as the developers would be unaware that they are distributing malicious files."

No one just a little bit concerned ?