Kudos to AISI for the quick & thorough investigation. This feels more concerning than the huggingface one.
Mythos Tors to get to Github, pretends to be humans and e-mails malware to real maintainers for a supply-chain attack, even after realizing "Github is genuinely real."