Looks suspicious if you ask me. Maybe somebody hacked the github advisory db?
https://github.com/advisories?page=1&query=type%3Amalware