Looks like GitHub was hit with a bruteforce attack compromising some user accounts with weak passwords. Emails have been sent to the accounts compromised with instructions on what to do.