Someone used my open source project to phish people

What they don't tell you about maintaining an open source project