Popular code repository GitHub is taking action against hackers targeting popular JavaScript code packages to spread malware.