PSA: New GitHub phishing campaign using fake Paradigm grants

Posted by nyan-left on Thursday September 25, 2025 @04:26PM
from the self-post dept.

Looks like they're creating GitHub issues that look like emails, then mass @mentioning users to send phishing notifications via github.com

https://github.com/paradigm-holdings/paradigm/issues

( 4 comments | 4 points | on HN )

Re:PSA: New GitHub phishing campaign using fake Paradigm grants by gus_massa on Thursday September 25, 2025 @08:39PM (#45381182)

A few days ago, there was a similar campaign with a few fake YC names https://news.ycombinator.com/item?id=45352610

[ Parent | on HN ]

Re:PSA: New GitHub phishing campaign using fake Paradigm grants by willbur1972 on Saturday September 27, 2025 @02:48AM (#45393665)

The cleanup has exposed a bug in GitHub where I now have an invisible unread message in my inbox which I can’t remove.

[ Parent | on HN ]

Re:PSA: New GitHub phishing campaign using fake Paradigm grants by phplovesong on Monday September 29, 2025 @02:56AM (#45411006)

Its a bug for sure. I managed to "remove" the unread notification with github cli tool as following:

gh api notifications -X PUT -f last_read_at=2025-09-28T00:00:00Z -f read=true

However, i still see the repo in my repo list, that i cant delete or access.

[ Parent | on HN ]

Re:PSA: New GitHub phishing campaign using fake Paradigm grants by klageveen on Wednesday October 01, 2025 @11:02AM (#45438528)

[ Parent | on HN ]