Some unsavory types are watching Apache activity. I submitted my first Apache PR in a long time yesterday, by morning I had two phishing emails mentioning Apache in both subject and body at the relevant email address.
I hope the community is aware of this issue? I don't recall this happening even this summer. I've still got them if anyone at the foundation is keeping track of this. Be careful out there, Eric