[gzalo]

Not really. The username from the commits is the same one that created the PR. The username evildojo666 was available and the attacker just used it.