This is the first time I'm posting anything here but I figured this may be the right audience.

I've never run into something like this and I don't quite know what to make of it. I'm the author and maintainer of libgpiod. The official git repository is the one at kernel.org[1]. There's also a github mirror[2] as well as a documentation page[3] at readthedocs that I maintain.

I noticed (purely by chance) that there's a new website at libgpiod.com that's been created recently. I have nothing to do with it. It's clearly AI-generated but it redirects to my github. It's a 2 month old domain, anonymized registrar, protected by Cloudflare and NeoProtect and a Swedish host behind that.

Clearly someone went to great lengths to stay anonymous. I'm afraid of falling victim to some new elaborate supply chain attack. What should I do about it (if anything)? Has anyone else experienced something similar?

[1] https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/
[2] https://github.com/brgl/libgpiod
[3] https://libgpiod.readthedocs.io/
Libgpiod - Modern C Library for Linux GPIO Hardware Control

Libgpiod is a modern C library for Linux GPIO control, enabling efficient hardware access for embedded and system developers. #Libgpiod

Libgpiod
@brgl I'd start reporting it as a malware/phishing site to Clownflare, etc.
@dalias @brgl Also one that can be done instead of that horrible registrar (Epik) is reporting it to VeriSign the operator of the .com TLD.
@lanodan @dalias @brgl wait epik still exists??
@lanodan @dalias @brgl i didn't realize they survived when the 420chan guy pwned them
@xyhhx @dalias @brgl pwns are pretty much just theater/scene, after all Comodo is still a CA, CrowdStrike is still a thing, …