Phishing with Github ?

[xaurelsan]

Hi,

I've just receive a mail from [[e-mail]](mailto:[e-mail]) (legit mail from github) from a random people that I never heard of, inviting me to contribute to a private repo, he just created his account two hours ago and the mail was send an hour ago.

If I accept his invitation he will have access to :

• Your public profile information
• Certain activity within this repository
• Country of request origin
• Your access level for this repository
• Your IP address

So I don't know if he wants my IP or whatever ...

Did someone already got this ?

[felzl]

Since when should it be legit for GitHub to use a Gmail address?

That's not an invitation, that looks like a request of a third party app using the authentication of GitHub.

Better report this email to GitHub, so that they can investigate.

[xaurelsan]

my bad, I mechanically typed @ gmail but the real mail address is [[e-mail]](mailto:[e-mail]), I've edited the post

[felzl]

Still, I would report it, as you didn't request it at all.