请不要下载这个文件！

[hejiehao]

最近在 GitHub 上出现了如下的 Comment

Download<病毒链接>
password: changeme
In the installer menu, select "gcc."

to fix your trouble try download this fix, i see it in another issue,
<病毒链接>
password: changeme
when you installing, you need to place a check in install to path and select "gcc."

如果你看见了类似这样的 Comment，请不要下载！这是病毒！

[lisonge]

Currently, this virus has led to the theft of GitHub accounts, resulting in approximately 4,000 comments containing virus files being posted.

https://github.com/search?q=%22password%3A+changeme%22&type=issues

Many repositories' issues have been affected.

[n0099]

https://v2ex.com/t/1067998

[luduting]

If you click on this link, your GitHub account will be hacked

[wuliaodexiaoluo]

已向 MediaFire 反馈此问题

[SALTWOOD]

已经通过 GitHub Support 举报。以下是我通过gpt生成的一篇短文，大家可以参考：

Dear GitHub Support Team,

I hope this message finds you well. I am writing to report a serious issue involving a user named "Superming997" who has been spreading malicious content across multiple repositories on GitHub. This user has been posting comments that include a link to a file hosted on MediaFire, which appears to contain a virus.

The comments have been found in the following repositories:

HMCL-dev/HMCL#3267
HMCL-dev/HMCL#3266
microsoft/vscode-remote-release#10189
In the comments, the user provides a download link to a file named "fix.zip" with a password and instructs users to select "gcc" in the installer menu. This is a clear attempt to trick users into downloading and executing malicious software.

For your reference, here is the direct link to the file:
Hidden

Please take immediate action to investigate and remove this content, as it poses a significant risk to the GitHub community. Additionally, I recommend taking appropriate measures against the user "Superming997" to prevent further distribution of harmful files.

Thank you for your prompt attention to this matter.

Best regards,
[Your Name]

[wyc-26]

转到 #4616 继续讨论（