On: Git: Malicious repositories can execute remote code while cloning

[saagarjha]

But probably their work email when doing things on company time?

[enneff → saagarjha]

Nope. This is an example of someone working on company time using their personal email.

[saagarjha → enneff]

Right, which is (AFAIK) not usually recommended except for side projects or ones where there is already an existing relationship under a personal email address.