This is the second pwn I've heard about from cloning a repo and running it :(
There's a thread about it on LinkedIn at the moment - apparently it is a common thing right now but I don't spend enough time on there to keep up with all the latest bs
❤️1