PSA: New GitHub phishing campaign using fake Paradigm grants

[nyan-left]

Looks like they're creating GitHub issues that look like emails, then mass @mentioning users to send phishing notifications via github.com

https://github.com/paradigm-holdings/paradigm/issues

[gus_massa]

A few days ago, there was a similar campaign with a few fake YC names https://news.ycombinator.com/item?id=45352610

[willbur1972]

The cleanup has exposed a bug in GitHub where I now have an invisible unread message in my inbox which I can’t remove.

[phplovesong]

Its a bug for sure. I managed to "remove" the unread notification with github cli tool as following:

gh api notifications -X PUT -f last_read_at=2025-09-28T00:00:00Z -f read=true

However, i still see the repo in my repo list, that i cant delete or access.

[klageveen]

This SO topic also has a solution via the GitHub UI: https://stackoverflow.com/questions/73581385/github-notifica...