Psa: New Github Phishing Campaign Using Fake Paradigm Grants
Posted3 months agoActive3 months ago
Techstory
skepticalnegative
Debate
20/100
GithubPhishingSecurity
Key topics
Github
Phishing
Security
Looks like they're creating GitHub issues that look like emails, then mass @mentioning users to send phishing notifications via github.com
https://github.com/paradigm-holdings/paradigm/issues
A new phishing campaign on GitHub is using fake Paradigm grants to trick users into divulging sensitive information via fake issues and @mentions, prompting warnings from the community.
Snapshot generated from the HN discussion
Discussion Activity
Light discussionFirst comment
4h
Peak period
1
0-12h
Avg / period
1
Key moments
- 01Story posted
Sep 25, 2025 at 4:26 PM EDT
3 months ago
Step 01 - 02First comment
Sep 25, 2025 at 8:39 PM EDT
4h after posting
Step 02 - 03Peak activity
1 comments in 0-12h
Hottest window of the conversation
Step 03 - 04Latest activity
Oct 1, 2025 at 11:02 AM EDT
3 months ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
ID: 45378529Type: storyLast synced: 11/20/2025, 6:27:41 PM
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
gh api notifications -X PUT -f last_read_at=2025-09-28T00:00:00Z -f read=true
However, i still see the repo in my repo list, that i cant delete or access.