That "security alert" looks real, but is actually a scam.
You could set a new PR, or you could doom yourself to horrible blisters.