This is the first time I've seen someone weaponize a repo like this, it's rather concerning.