Phishing attack through GitHub notification

1•ghm2199•1h ago

I got a phishing email from a repo I never subscribed to https://github.com/ycombbiinator/-co

The email looks like so https://pasteboard.co/HYYB7qg0tv2M.png

And I could see I was subscribed to the "issue" https://pasteboard.co/zIj5fcaIhNYA.png

Comments

gnabgib•1h ago

> The best email address for anything like this is security@ycombinator.com

https://news.ycombinator.com/item?id=45353095

"Discussion" (17 points, 4 hours ago, 17 comments) https://news.ycombinator.com/item?id=45352610

ghm2199•1h ago

I am sure I never subscribed to this repo. However I came across https://github.blog/changelog/2025-04-14-sunset-notice-for-a...

which possibly means one of the teams I had actually been a part of is the issue.

What Happens to Artists' Studios After They Die?

Billboard.js 3.17.0: New Axis Customization, Label Styling and Image Labels

Project Mohole

LLMs are strangely-shaped tools

2025 DORA AI-assisted software development report

Scientist behind Trump's Tylenol claims was paid $150K to give evidence

How frequently do vulnerabilites affect TLS on Android?

Tunn – SSH tunnels made simple

The Magnus Archives Transcripts

Aerospace: An I3 Like Tiling Window Manager for macOS

Google Admits Censorship; Promises to End Bans

Qwen3Guard: Real-Time Safety for Your Token Stream

Quadratic memory reductions for Zero-knowledge Proofs

Ask HN: Best LLM model for code generation?

A chat with 19-year-old me

Global Ancestry Index 2025

Zutty: Zero-cost Unicode Teletype, high-end terminal for low-end systems

Hello, I'm in love with Htmx and Datastar

Feds say 100k-card farms could have killed cell towers in NYC near the UN

Random User Generator

Wildfires and climate change may push showy dragonflies to extinction

What I learned in the first five years of Platformer

Visual Studio Code Pokémon

New $100k H-1B Visas Rules Could Also End the Lottery System as We Know It

Show HN: Jimmy Kimmel Monologue Generator

Bank of Canada's Macklem Warns U.S. Dollar Losing Appeal as Hedge

Gartner had my post ridiculing Gartner removed

Bring true randomness to Spotify with Fisher-Yates shuffle

NASA plans first crewed Moon mission in 50 years for February 2026

iPhones May Soon Work Better with Third-Party Smartwatches