I got this suspicious email today (just posting a screenshot to avoid publishing any dodgy links) which I'm guessing targeted me because I have fork of the Joplin repository on GitHub. Assuming this is some kind of phishing, please beware.
The links in the email are in a form like this: