'GoIssue' Cybercrime Tool Targets GitHub Developers En Masse

Researchers discovered GoIssue, a commercial tool sold on cybercrime forums that automates harvesting email addresses and using GitHub tokens to target developers, enabling bulk phishing, credential theft, and subsequent malicious activity (including OAuth-based account takeover and supply-chain attacks). The tool is marketed to attackers and may be linked to the Gitloker repository-extortion campaign, representing a scalable threat to GitHub users and organizations with developer-centric exposures.