Github hit by massive password guessing attack