Comment by icflorescu

OSS maintainer, @icflorescu on GitHub, owner of a few affected repos here.

My full analysis and IOCs: https://dev.to/icflorescu/the-bot-that-never-was-2mfp (source repo on codeberg: https://codeberg.org/icflorescu/miasma-github-incident)