GitHub notifications abused to impersonate Y Combinator for crypto theft

https://www.bleepingcomputer.com/news/security/github-notifications-abused-to-impersonate-y-combinator-for-crypto-theft/