Security alert: social engineering campaign targets technology industry employees

GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms. No GitHub or npm systems were compromised in this campaign. We’re publishing this blog post as a warning for our customers to prevent exploitation by this threat actor.

accounts actor alert blog blog post campaign compromised customers employees engineering exploitation github industry low npm personal publishing security security alert social social engineering systems technology technology industry threat threat actor warning