Finally i decided to scan the said wallet on virus total;
https://www.virustotal.com/#/file/2d91fc6e2102ff0464ba43a1a956ed7854cb45cac8a18c354a8346f71a68dd6d/detection
this is surprising - when I checked the wallet with virustotal it did not show me any backdoors or viruses. Since I deleted the files (in panic) I only have the download links now. But I think your check is accurate.
It leaves another company to contact for information. See https://github.com/contact/report-abuse
Github may be more willing to give more information regarding the wallet repo & the account it's under.
The hacker(s) probably provided fake info to Github when signed up, but perhaps IP addresses might be helpful.
Oh there's no doubt they faked info. But an IP may correlate to one of the attacks.
Doing a quick WhoIS pulls up NameCheap as their registrar.
https://who.is/whois/electrumdiamond.org
I'd contact their abuse email as well to see if they can assist at all.
It seems the domain was registered more than a year ago: you may be able to find cached versions of their DNS.
http://research.domaintools.com/research/whois-history/search/?q=electrumdiamond.org