A global campaign hijacking open-source project identities
fullstory.com