Never execute malware samples on a production machine or any system connected to the internet. Use virtual machines (VMware, VirtualBox, or QEMU) with network isolation to prevent accidental infections.
Traditional Antivirus software looks for known file hashes. If a threat actor pulls source code from GitHub and modifies a few lines, the file hash changes, rendering signature-based AV useless. mega rat pack github