Summary: kzu was frustrated with funding of moq. Developed a library called sponsorlink and dogfooded it into moq with little notice.
Sponsorlink is closed source and obfuscated. While building, it takes a moment to find your GitHub info (supposedly hash it, trust me bro?) And look up your data on azure.
If you're not a sponsor, asks you to become one.
Now happens in projects with moq 4.20+.
I probably don't have to explain more than that. Huge GDPR issues.