I stumbled across this Wired article about "Cybersecurity researchers spotting a 3,000-account network on GitHub that is manipulating the platform and spreading ransomware and info stealers" and I know some PLUG folks use Github.
https://www.wired.com/story/github-malware-spreading-network-stargazer-goblin/?utm_source=pocket-newtab-en-us -mc Sent with [Proton Mail](https://proton.me/) secure email.
