Virus total should be scanning GIthub at the least, because it is a job MS Defender can't appear to itself.