Github did weigh on this now saying they are unaffected <a href="https://twitter.com/GitHubSecurity/status/1052317333379723265" rel="nofollow">https://twitter.com/GitHubSecurity/status/105231733337972326...</a>