Someone briefly had a pointer to http://www.google.com/safebrowsing/diagnostic?site=code.goog..., which includes:

> Malicious software is hosted on 23 domain(s), including sms-bomber.googlecode.com/, gdata-issues.googlecode.com/, infojob.googlecode.com/.

I would actually compare it to github.com and github.io http://www.google.com/safebrowsing/diagnostic?site=github.co...

[1] https://news.ycombinator.com/item?id=8934594