GitHub 上面搞诈骗？

[equationzhao]

刚才突然 GitHub 上收到通知， 点开一看，发现是一个从来没看过的 blog 下的 [issue] ( https://github.com/slevin57/Blog/issues/1)

全文如下, 点击链接之后是一个 GitHub Authorize 的界面，要求授权

Hello,

We have an exciting opportunity for you! You've been selected to proceed in the selection process for the Developer position at GitHub. Congratulations on your achievement!

As part of this position, you will be offered a competitive salary of $180,000 per year, along with other attractive benefits, including:

Health insurance coverage
Retirement savings plan
Flexible work schedule
Generous vacation and paid time off
Professional development opportunities
To proceed with the hiring process, we kindly ask you to fill out some additional forms and provide some additional information. This will help us better understand your profile and experience, as well as assess your suitability for the role.

Please click here[https://auth.githubtalentcommunity.online/] to access the forms and complete the application process. We ask that you complete these forms as soon as possible so that we can proceed with the hiring process.

Important: You have 24 hours to complete the application process.

If you have any questions or need further information, please don't hesitate to contact us.

Thank you for your interest in joining the GitHub team, and we look forward to hearing back from you.

Best regards,
GitHub Recruitment Team
42-lab, @beishu-bot, @k1ng0fic3, @Mtora, @shivanshu814, @1052445594, @Infinity06X, @LennonLing, @Equationzhao, @Rain1047, @Archivev, @hhun, @Jesseyzx, @jiangxiaoyu66, @icecliffs, @DanielTaoBX, @Wh1tew0lf-sea, @Z731, @Nyovelt, @404notfoundf

https://github.com/orgs/community/discussions/109171 似乎很多人都收到了， 大家有收到的话记得也举报一下

[lisxour]

已经举报了 N 个了

[antpi]

同遇到，就这段时间起来的

[kingterrors]

我不太理解我什么时候关注了这个邮箱提到的 issues 的。他是怎么操作的啊

[lisxour]

@kingterrors 不需要你关注，爬虫根据关键词收集到某某某相关的账号后，这些机器人账号就会去各种长期没人管（几年、几个月没人回复没关闭的那种）的 issue 、pr 艾特你，你就会收到通知的。

[CCddf]

然后供应链投毒

[error451]

这个能诈骗到什么呢？

[dontLookAvatar]

@lisxour #4 今天刚遇到, 一个没见过的 repo, 几年的 issue 给我提醒, 我都莫名其妙

[zeromake]

我看了一下 comment 的 ↗ 下拉里面根本没有举报选项……，怕不是只有项目相关人员才有

[equationzhao]

@zeromake 你可以点到用户的主页,下面有个 report

[xuexingwei]

可能是跟最近的 github 赏金有关系！

[icecliffs]

我直接举报了，莫名其妙被 @到，还给我发邮件