GitHub users received a phishing email warning of security holes in their code.Clicking the link led to a fake CAPTCHA page asking users to prove their humanity.The CAPTCHA involved pressing specific key combinations that downloaded password-stealing malware.The malware downloaded is called Lumma Stealer, designed to steal credentials from victims' PCs.