ChailotlThe attack vector is to socially engineer the user to add a malicious rel="me" link to their Neocities page pointing to the attacker's GitHub profile, which lets them use it as a means to log in by authenticating with their own GitHub account