RT GitHub Security
We’ve identified a low-volume social engineering campaign targeting the personal accounts of employees of technology firms. No GitHub or npm systems were compromised in this campaign. Read more to prevent exploitation by this threat actor. https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/

https://twitter.com/GitHubSecurity/status/1681331723286765569