The title is bait. This us not an attack vs Gmail or users of Gmail, but a supply chain attack. The attackers just use Gmail, because it’s a trusted mail service, so there’s a higher chance devs don’t notice and they don’t get blocked.