Finally i decided to scan the said wallet on virus total;
https://www.virustotal.com/#/file/2d91fc6e2102ff0464ba43a1a956ed7854cb45cac8a18c354a8346f71a68dd6d/detection
this is surprising - when I checked the wallet with virustotal it did not show me any backdoors or viruses. Since I deleted the files (in panic) I only have the download links now. But I think your check is accurate.
It leaves another company to contact for information. See https://github.com/contact/report-abuse
Github may be more willing to give more information regarding the wallet repo & the account it's under.
The hacker(s) probably provided fake info to Github when signed up, but perhaps IP addresses might be helpful.