A new type of phishing attack has spread among developers — attackers pretend to be recruiters and the GitHub security…