icflorescu

OSS maintainer, @icflorescu on GitHub, owner of a few affected repos here.

My full analysis and IOCs: https://dev.to/icflorescu/the-bot-that-never-was-2mfp (source repo on codeberg: https://codeberg.org/icflorescu/miasma-github-incident)

It's 3 days now, and sadly yes, I can confirm the story. My @icflorescu GH account still suspended, total silence from their support, malicious payload still there and no way for me to remove it. Haven't slept since, tried everything, posted everywhere I could think of. Any help would be highly appreciated.