Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.