GitHub Advisory Database identifies this repo as malware

Dependabot has raised this repo as a vulnerability. It was flagged because we have `@types/github-script` installed. Is this something that can be mitigated/resolved? https://github.com/advisories/GHSA-v9m5-8c6w-p3m5