New scam on GitHub
New scam on GitHub
These scammers copy the text from new issues verbatim, and paste them in a new issue in a "support" repo. They tag the original author so they get notified.
They then use GitHub Actions to reply with a phishing link and email.
This particular repo has been up for a week and has done this to 113 people.
The link leads to a page that impersonates GitHub support. Every link on that page leads to a crypto scam.
If you stumble across such a repository, please report it. You can report this one here.