Tell HN: Beware phishing via GitHub Issues notifications

8 points by scottbez1 ↗ HN
I've seen a recent surge in phishing attempts that post a markdown phishing message as an Issue in order to trigger GitHub to (legitimately) send an email that looks like a security warning to all repo followers.

For example: https://github.com/aojibril, https://github.com/transporindo, https://github.com/kirukatodrag

2 comments

[ 7.6 ms ] story [ 19.7 ms ] thread
(comment deleted)
GitHub has long been bad at notifying me of anything. It’s usually nonstop spam from every repo I've ever interacted with. I wish they’d figure out how to filter down the noise to important notifications.