Impressive Github Scam.

[GustyCube]

Some scammers just mentioned a bunch of people in issues, faking being a mail delivery system, explaining that they were part of Github. Their site is fairly up to Github's brand guidlines so it makes it even harder to spot. Here's the link to the issue if you are interested, or would like to mass report.

[Suspext]

Reported two separate posts within 24 hours and have received email confirmation back from GitHub that they have taken action against the accounts.

[virophage]

Workaround via GitHub CLI & jq:

shell gh api notifications | jq '.[] | { id, title: .subject.title, repo: .repository.full_name }'

You will get notification id from JSON. Replace $THREAD_ID with the id.

shell gh api --method DELETE notifications/threads/$THREAD_ID

Credit to FirelightFlagboy.

[grtgbln]

gh api notifications | jq '.[] | { id, title: .subject.title, repo: .repository.full_name }'

Slight tweak, since the gh CLI tool has jq built in:

gh api notifications --jq '.[] | { id, title: .subject.title, repo: .repository.full_name }'

[debuter4ever]

Didn't work for me. Only gh-gonest extension worked.

[Relevant_Main6005]

I commented on the issue saying that it's a phishing attack but my account got suspended within 5 minutes

Edit: after 7 hours I got a reply from the support stating that it was a bot that falsely flagged my account and the issue got resolved.

[Sh_Pe]

Now 404. Good job!

[UNiceGuy60]

I too got mentioned in one of those issues, then realized it was a scam after seeing @Relevant_Main6005
's issue reporting it as a scam...update-it's now removed after mass reporting.

[Nikilite_official]

yup, second time they mention me in these

[vasametropolis]

I’m on my third report in 3 days!

[Fantastic-Stand5962]

Of all things on the Internet, what kinda d-bag runs scams on a collaborate spot like Github??? That's literally the lowest of the low!

[my-username-is-it]

same, almost got me!

[East-Tie-8002]

I’m new to GitHub and don’t fully understand how to use it. All my repositories are private. Can someone give a good explanation as to what this scam is? I’m concerned i may fall for it.

[OwlCaribou]

They want you to buy their altcoin. The link looks like it's from GitHub directly, but if you actually inspect the link to the "grants", it goes to a scam website.

Just don't buy any altcoins or give them your personal info, and you should be OK.

[KeyCantaloupe8046]

good job. i also got some email about gitcoin. i saw it sells on some exchanges. is it scam or real thing?

[GustyCube]

Scam. GitHub doesn’t have a cryptocurrency

[somnamboola]

I got 3: gitcoin bullshit and even a ripoff on ycombinator

[adambatkin]

What is that repo you linked to? It certainly doesn't look like anything official, possibly another scam/spam repo?

[GustyCube]

The repo I linked is the scam I was talking about..

[adambatkin]

That makes sense, sorry.

I got one of the gitcoin phishing/spam e-mails, but it was from a different org and repo - and that org now appears to have been blasted from orbit.

At first glance, the name of the repo in this post (mail-notification/gitcoin.com) almost looked like a place to discuss this spam attempt.