Tell HN: Beware phishing via GitHub Issues notifications

8 points by scottbez1 ↗ HN
I've seen a recent surge in phishing attempts that post a markdown phishing message as an Issue in order to trigger GitHub to (legitimately) send an email that looks like a security warning to all repo followers.

For example: https://github.com/aojibril, https://github.com/transporindo, https://github.com/kirukatodrag

2 comments

[ 0.22 ms ] story [ 17.2 ms ] thread
(comment deleted)
GitHub has long been bad at notifying me of anything. It’s usually nonstop spam from every repo I've ever interacted with. I wish they’d figure out how to filter down the noise to important notifications.