Attackers don't just guess your passwords. They scrape GitHub repositories for...

https://mega-wiki.win/index.php/Security_Audit_Request_Email_Feels_Off:_How_to_Validate_It

Attackers don't just guess your passwords. They scrape GitHub repositories for forgotten API keys and scan public search results for exposed SSH configs