very likely a scam. the github id which sent this is a new github account, just opened last week.