Hacker News Reader

Why not just disclose it responsibly to github without using it on other people's accounts?

It seems he did but they didn't show interest (according to the comment of zaph0d on this page).