sounds like a sign up bomb for github addresses, these are typically used to hide new login notifications by threat actors