Phishing, need reports

[allyssonallan]

Select Topic Area

Show & Tell

Body

There is a bot trying to get victims here:

https://github.com/ycombinattoor/-co/issues

Please report it!

[mm12]

In addition, once the repo was taken down, the notification disappeared, but the flag to remove it did not. I now (seemingly permanently) have a stuck unread message that doesn't exist.

[mm12]

#174402

[mechalynx]

Reported it. The email from github says "We are experiencing high volumes and therefore, you may experience longer than normal wait times" so it seems this bot is causing a lot of noise.

I also have the stuck notification with no way to remove it.

Edit - see linked issue above for a workaround, same one presented in #111217 and apparently many others

Edit 2 - The linked issue's fix did not resolve it for me but this did: https://github.com/orgs/community/discussions/6874?sort=new#discussioncomment-14481926

[joelmiguelvalente]

A mi me llego lo mismo que me a mencionado y no lo puedo quitar...

[avuenja]

Hey guys, same here, arrive a notification, and I can't remove the notification :/

[mechalynx]

The stuck notification is an old problem. This solution worked for me, though it is a bit tedious: https://github.com/orgs/community/discussions/6874?sort=new#discussioncomment-14481926

[avuenja]

Yo! Yeah, I read it, and remove it! Now my OCD, is relax hehe

[ID-iot-git]

I just wondering on how to spot those and particularly on such critical issues such as "victimized" users.

[frontboat]

Quick solution: curl command with PAT and ISO 8601 time

For anyone else trying to mark this annoying notification as read, here's what worked for me:

curl -X PUT \
    -H "Accept: application/vnd.github.v3+json" \
    -H "Authorization: token $TOKEN" \
    https://api.github.com/notifications \
    -d '{"last_read_at":"'$(date -u +"%Y-%m-%dT%H:%M:%SZ")'"}'

• Generate a Personal Access Token with the "notifications" scope to replace $token
• this automatically formats your current time to ISO 8601

Courtesy of @mechalynx sharing this thread: https://github.com/orgs/community/discussions/174540#discussioncomment-14508806

Thank you!

[Omprakash3104]

Thank you for flagging this! I can see you've found a suspicious repository that appears to be malicious.

Here's how you can properly report this to GitHub:

Immediate Actions:
Report the repository directly to GitHub:

Go to the repository page: https://github.com/ycombinattoor/-co

Click on the "..." (three dots) menu near the top right of the repository

Select "Report content"

Choose the appropriate category (likely "Malware or phishing")

Provide details about why it appears to be a bot targeting victims

Report the specific issues:

Click on the "Issues" tab in that repository

Open each suspicious issue

Use the "..." menu on each issue to report them individually

Why This is Important:
You're right to be concerned - repositories like this often:

Try to phish for personal information

Spread malware through fake links

Scam users with fraudulent offers

Abuse GitHub's platform for malicious purposes

Community Protection:
By reporting this, you're helping protect other GitHub users from potential harm. GitHub's security team takes these reports seriously and will investigate promptly.

Thank you for being a vigilant community member! It's users like you who help keep the GitHub ecosystem safe for everyone.

Would you like any help with the reporting process, or are you able to navigate the reporting flow on GitHub's site?