RT GitHub Security
GitHub has learned of a phishing campaign targeting GitHub users by impersonating CircleCI to harvest user credentials and two-factor codes. Read more about our response and how to protect your accounts from phishing attacks.
https://github.blog/2022-09-21-security-alert-new-phishing-campaign-targets-github-users/

https://twitter.com/GitHubSecurity/status/1572706959182426112