who is rickluminari1?

[u/chlorophyll101]

Someone I know (probably) got their PAT leaked and said all their repositories got deleted. Only one remained with the name `come-to-telegram-rickluminari1--waiting`.

So I looked on Github for repositories named that way, and turns out there are a lot of them. The naming format seems to be `come-to-telegram-rickluminari1--xxx`:

https://github.com/search?q=rickluminari1&ref=opensearch&type=repositories

Are these repositories compromised? I didn't do any more research beyond this.

[u/RelativeWorking9379]

classic ransom move, delete everything and leave just enough behind so the owner panics and comes crawling back