I’d personally suggest sending an email to one of your profs about noticing potentially malicious network activity that originated from a fellow uni student with your attached proof.

In that same email you could ask them what’s the proper procedure for the circumstance you’re in.

I won an ipad air once and immediately sold it on kijiji cause I don’t use apple’s proprietary ewaste

I used the money to repair my bike :D