@paulox there have been a few folks from the security team who have reported the GitHub user/org: https://github.com/django-security