攻击者会在特定仓库at用户，触发Github的邮件通知，通知里面包含一个github.io的地址，当你点击之后会跳转到Oauth授权界面 
攻击页面存放仓库 
https://github.com/info-notify/info-notify.github.io

Oauth归属人： 
https://github.com/the-request

目前已知相关Issues仓库: 
https://github.com/705039/notification
https://github.com/7051294/warning
https://github.com/7059823/warning
https://github.com/70512093/notification
https://github.com/7051294/Security
https://github.com/7...