@SomeWandomNoob @dangoodin the researchers are linked in the article, right at the start.

https://apiiro.com/blog/malicious-code-campaign-github-repo-confusion-attack/