On October 22, 2026, BleepingComputer reported Attackers, Exaforce, GitHub. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are Attackers, Exaforce, GitHub. The subject words I am keeping are phishing, credentials.
If a model is in the loop, I want a log of what it touched. A person stays on anything that is not a plain read.
Source I used: BleepingComputer. The link is under this column.