Post

Attack on FOSS developers: They ask you per mail to put a badge on your GitHub profile, which communicates with their API to display a counter in exchange for cryptocurrency. Later, they could inject malicious links on your GH profile page because it's linking to their API. Be careful out there!