Comment by elashri
> The attacker quickly deletes the issue
I realized I have never deleted an issue I started but doesn't people with admin access the only with ability to delete the issues on a repo? [1]. So actually there is a trace for that issue in the repository. Same thing for Pull requests.
[1] https://docs.github.com/en/issues/tracking-your-work-with-is...
Maybe GitHub had already deleted it as malicious, but the email was already delivered.