But that is someone pretending to be YC which is sort of less interesting than a YC company doing something bad. Because phishers imitate legit companies all the time. Easy to get roped in and I sympathise, anyone is suseptable (today I almost clicked the phishing training email as it looked urgent and pushed the right buttons)

Looks like GH nuked it, though.

Hope they didn’t get too many folks.

That's a little creepier than the time I got an email from someone trying to push a new crypto coin to me because I contributed to OSS.