PSA: New GitHub phishing campaign using fake Paradigm grants

11 pointsnyan-left4 comments

Looks like they're creating GitHub issues that look like emails, then mass @mentioning users to send phishing notifications via github.com

https://github.com/paradigm-holdings/paradigm/issues

A few days ago, there was a similar campaign with a few fake YC names https://news.ycombinator.com/item?id=45352610

The cleanup has exposed a bug in GitHub where I now have an invisible unread message in my inbox which I can’t remove.

Its a bug for sure. I managed to "remove" the unread notification with github cli tool as following:

gh api notifications -X PUT -f last_read_at=2025-09-28T00:00:00Z -f read=true

However, i still see the repo in my repo list, that i cant delete or access.