[zabil]

Thanks for doing the research. My repo getgauge/taiko (listed on the screenshot) was affected by this. I reported these as phishing attacks as I had no idea what it was about.