If you believe their GitHub org/accounts to be compromised, it kind of makes sense to verify if that's true or not outside of GitHub. With that said, wouldn't h

If you believe their GitHub org/accounts to be compromised, it kind of makes sense to verify if that's true or not outside of GitHub. With that said, wouldn't hurt with a GitHub issue regardless.