We understand the inconvenience caused by these unsolicited phishing notifications and our team is actively working to mitigate them. We want to remind our users to continue to use our abuse reporting tools to raise any abusive or suspicious activity.

We would like to bring to our users’ attention to the following:

• Please do not click any links or reply to these notifications. Please report them.
• Authorizing an OAuth app can expose your GitHub account and data to a third party.
• GitHub recommends you periodically review your authorized OAuth apps.
• This spam activity targets and abuses GitHub’s mention and notification functionality.
• This is a phishing campaign and is not the result of a compromise of GitHub or its systems.