Ask HN: Has anyone had their GitHub repos being targeted by malicious clones?

Another supply chain attack vector. Always verify source integrity ;)