Will the fake GitHub infostealer repos compromise 100+ victims by Sept 30?

A threat actor has published ~300 fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware (source: Bleeping Computer). Market resolves YES if public evidence confirms 100+ victims compromised via these repos (credential theft, account takeover, data exfiltration).

Resolution Criteria

Public disclosures from affected users, security vendors, or CISA advisories documenting credential or account compromises traced to the fake repos. Screenshots, incident reports, or statements from 100+ victims.