A malware dev has committed a magnificent self-own after an AI-coded malicious package leaked its own GitHub private token