This feels a little click baity. I am sure there are tons of exploity software repos on github as well. Need to use some common sense and protect yourself and report things that seem off.

I guess it might be surprising to some that code from HF can have exploits just like GH.