North Korean hackers target open-source repositories in new espionage campaign