I think GitHub should have added a more descriptive error message (since they control it thanks to how the attack vector works).

    alert(
      "The site you are visiting contains malicious JavaScript.\n" +
      "Your computer is currently being used to attack Github.com."
    )

or something...