Yes, we (Phylum) work closely with Github and reported this account to them.