If the account was compromised only recently the real co-maintainer would have done everything to warn the maintainer. If you're maintaining some core piece of

If the account was compromised only recently the real co-maintainer would have done everything to warn the maintainer. If you're maintaining some core piece of infrastructure and your account gets compromised it would be trivial to let at least someone know you're not the one pushing these commits.