China's Giant Pinduoduo Exploits 0days to Get One Billion Users’ Personal Data

There's no English language coverage of this event. Yes it's real and widely covered in Chinese language news.

The repo on github was trending yesterday, presumably entirely from traffic driven by Chinese language news sources. https://github.com/davinci1010/pinduoduo_backdoor